0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:52:17 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:52:17 executing program 0:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(r0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)

03:52:17 executing program 0:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(r0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)

03:52:17 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0xfe00)

03:52:17 executing program 0:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(r0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)

03:52:17 executing program 7:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_io_uring_setup(0x42eb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8000039a}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000080))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
syz_io_uring_setup(0x4d84, &(0x7f0000000000)={0x0, 0x43df, 0x4, 0x1, 0x3aa, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
write$tun(r1, &(0x7f00000000c0)={@val={0x0, 0xf8}, @void, @x25={0x3, 0x6, 0x13, "21ce63a240b469c85510fb59ee"}}, 0x14)
fcntl$getown(r0, 0x9)
close_range(r0, 0xffffffffffffffff, 0x0)

03:52:17 executing program 4:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:52:17 executing program 0:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(r0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)

03:52:31 executing program 0:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(r0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)

03:52:31 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:52:31 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:52:31 executing program 7:
ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000080)={0x72, {0x8, 0x1f, 0x3, 0x1, 0x10000}})
r0 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x1, 0x40040)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000005c0)=ANY=[@ANYBLOB="01000800000000000000000053ea00c90226be144435016348cf9d8731f0d232736f0b0bc4ab8942f0da4d6a0a8eb4d542220cfad4c02684654b4708be90cfede70fcbb351dc1d2ebff24918fefa60ceb96edb76addea6cff77fb240b9aed87f606f13e73ba8a7c9706a5ef5b07fb844bdfefc16dbb89dedbdc1e069ee10682ec73678e2a5b9c329c4d0093bf012bea4ae43d7c170f7569b88ab0069a6d7c68071da5977625d6c8450b77ee2e1f41e4df103ea393a16ca3e66a331e0b5a593d5657e", @ANYRES32=<r1=>r0, @ANYBLOB="06000000000000002e2f66696c653000"])
r2 = syz_io_uring_setup(0xb9b, &(0x7f0000000440), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500))
io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x3, &(0x7f0000000580)={0x0, 0x3f00, 0x0}, 0x0)
ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000140)={0xfff, 0x3ed})
r4 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x80000396}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x1ccf, &(0x7f0000000180)={0x0, 0xb543, 0x8, 0x2, 0x86}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)=<r5=>0x0)
r6 = accept4$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14, 0x800)
r7 = syz_io_uring_setup(0xb9b, &(0x7f0000000440), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500))
io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x3, &(0x7f0000000580)={0x0, 0x3f00, 0x0}, 0x0)
ioctl$FIBMAP(r7, 0x1, &(0x7f0000000540)=0xc70)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000006c0)=ANY=[@ANYBLOB="0000000000000000200000001fe31b3bfc366a164d2bb364084d96173ed661f254f09a1b4260fe1d9cad060c1840adee8ce5602f47766c6c546e1c99a8666527fc42765cc406d79659ad41195e680198261a298a7b72a91f99301f2aee6af66202243be5577c840edb212401ba142b86dbcf5683d5438570ada2d61762e6974d383e5c91cb", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00'])
r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_setup(0x535f, &(0x7f0000000780)={0x0, 0xe03, 0x0, 0x1, 0xfb, 0x0, r4}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000400))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r8, 0x0, &(0x7f0000000340)="b10477ef79fcf4342613df6a3f8361befff4fea9151674ccb63bb7cc639bb940377a4cb6af56f15aa03b28da39c18b", 0x2f, 0x40012021, 0x0, {0x0, r9}}, 0x2)
syz_io_uring_submit(r3, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r1, 0x0, &(0x7f0000000280)="2a7f21418c7aa5db0766793ff680ee4b9772f88febe14418bbe712fd934289feada633565d20a2048ccd7c535a8fa2eb720fe8b431d5b09932f64c3f", 0x3c, 0x8010, 0x0, {0x0, r9}}, 0xfffffffd)

03:52:31 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x10e00)

03:52:31 executing program 4:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:52:31 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, 0xffffffffffffffff, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:52:31 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_io_uring_setup(0x42eb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8000039a}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000080))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
syz_io_uring_setup(0x4d84, &(0x7f0000000000)={0x0, 0x43df, 0x4, 0x1, 0x3aa, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
write$tun(r1, &(0x7f00000000c0)={@val={0x0, 0xf8}, @void, @x25={0x3, 0x6, 0x13, "21ce63a240b469c85510fb59ee"}}, 0x14)
fcntl$getown(r0, 0x9)
close_range(r0, 0xffffffffffffffff, 0x0)

03:52:31 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:52:31 executing program 0:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(r0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)

03:52:31 executing program 0:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(r0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)

03:52:31 executing program 5:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:52:31 executing program 7:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8000039a}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

03:52:31 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:52:31 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x11000)

03:52:32 executing program 0:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(r0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)

03:52:32 executing program 4:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:52:32 executing program 5:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:52:32 executing program 0:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(r0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)

03:52:47 executing program 7:
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$CDROM_SET_OPTIONS(r0, 0x5320, 0x2)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8000039a}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
close_range(r1, 0xffffffffffffffff, 0x0)

03:52:47 executing program 4:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:52:47 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:52:47 executing program 0:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(r0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)

03:52:47 executing program 5:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:52:47 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r3, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:52:47 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x11e00)

03:52:47 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:52:47 executing program 0:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(r0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)

03:52:47 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x12000)

03:52:47 executing program 7:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8000039a}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
r1 = syz_io_uring_setup(0xb9b, &(0x7f0000000440), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500))
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x3, &(0x7f0000000580)={0x0, 0x3f00, 0x0}, 0x0)
syz_io_uring_setup(0xe90, &(0x7f0000000080)={0x0, 0x52d2, 0x20, 0x1, 0x3b2, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
syz_io_uring_setup(0x4d84, &(0x7f0000000000)={0x0, 0x43df, 0x4, 0x1, 0x3aa, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000180)={0x0, 0x2, [@broadcast, @multicast]})
close_range(r0, 0xffffffffffffffff, 0x0)

03:52:47 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:52:47 executing program 0:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(r0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)

03:52:47 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:52:47 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x12e00)

03:52:48 executing program 7:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
syz_io_uring_setup(0x6d42, &(0x7f0000000000)={0x0, 0x400, 0x0, 0xfffffffe, 0x80000396}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
close_range(r0, 0xffffffffffffffff, 0x0)

03:52:48 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:52:48 executing program 4:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:52:48 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x13000)

03:53:05 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:53:05 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="54e04c8446bda942c4f8901965a31ff1def26c41d40dc30e052ff6bd1014cb9f30269e74dfd2bcc6732aac8620e316a427e464ad9a901903d42a94a11acd18bce6c2a259ec3aa701bcb54722d9c9e8bfb43d085a1265f8e1be25806d37ed17f06055c830996067f243a1b59c92d50c286a916aac168c2f55bb849dc580a7dac1a159985b608c1f8e274d22127070d4c267bfb3e10863a3d4cf72e46b30981d9558273f4ae339c12c749227b0712ce31045f23bebcb31d40e8a7e6b85edca041aa0c9e78055f4e193ae0224ea09b157a322bb0e02c9a983d290682a436c74d3df5fabcc0914546a1da73a699d7c6d02601d42e62fa885c2a2f6bb566aca8f00ab")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r3, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:53:05 executing program 4:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
pwrite64(0xffffffffffffffff, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r1, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:53:05 executing program 7:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xab06, 0x2, 0x0, 0x8000039c}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'vlan1\x00'})
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0xb9a, &(0x7f0000000440), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500))
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x3, &(0x7f0000000580)={0x0, 0x3f00, 0x0}, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=<r2=>0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0x0, r3, 0x0)
r4 = getgid()
r5 = getgid()
r6 = getpid()
prlimit64(r6, 0x0, &(0x7f0000000000), 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {r6, 0xee00, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r3, r5}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r4}}}], 0x78, 0x8041}, 0x440c0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, <r8=>0xffffffffffffffff}}, './file0\x00'})
fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {0x1, 0x4}, [{0x2, 0x6, r2}, {0x2, 0x2}, {0x2, 0x6, 0xffffffffffffffff}, {0x2, 0x0, r3}], {}, [{0x8, 0x4}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x3}, {0x8, 0x1, 0xee01}, {0x8, 0x4, r4}, {0x8, 0x0, r7}, {0x8, 0x2, r8}], {0x10, 0x2}, {0x20, 0x3}}, 0x7c, 0x2)

03:53:05 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x13e00)

03:53:05 executing program 5:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:53:05 executing program 0:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, 0x0)
shmctl$IPC_RMID(r0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)

03:53:05 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:53:05 executing program 7:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8000039a}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
r1 = syz_io_uring_setup(0xb9b, &(0x7f0000000440), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500))
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x3, &(0x7f0000000580)={0x0, 0x3f00, 0x0}, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f00000001c0)={0x8000000000, 0x7, 0x0, 0x0, 0x1, [{0x9, 0x7, 0x1, '\x00', 0x101}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
syz_io_uring_setup(0x4d84, &(0x7f0000000000)={0x0, 0x43df, 0x4, 0x1, 0x3aa, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'veth1_to_bridge\x00'})
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'macvtap0\x00'})
r3 = getpid()
fcntl$lock(r1, 0x6, &(0x7f0000000240)={0x3, 0x3, 0x8001, 0x2ac3, r3})

03:53:05 executing program 0:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, 0x0)
shmctl$IPC_RMID(r0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)

03:53:05 executing program 5:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="54e04c8446bda942c4f8901965a31ff1def26c41d40dc30e052ff6bd1014cb9f30269e74dfd2bcc6732aac8620e316a427e464ad9a901903d42a94a11acd18bce6c2a259ec3aa701bcb54722d9c9e8bfb43d085a1265f8e1be25806d37ed17f06055c830996067f243a1b59c92d50c286a916aac168c2f55bb849dc580a7dac1a159985b608c1f8e274d22127070d4c267bfb3e10863a3d4cf72e46b30981d9558273f4ae339c12c749227b0712ce31045f23bebcb31d40e8a7e6b85edca041aa0c9e78055f4e193ae0224ea09b157a322bb0e02c9a983d290682a436c74d3df5fabcc0914546a1da73a699d7c6d02601d42e62fa885c2a2f6bb566aca8f00ab")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:53:05 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:53:05 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(0x0, &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:53:05 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x14000)

03:53:05 executing program 0:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, 0x0)
shmctl$IPC_RMID(r0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)

03:53:05 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(0x0, &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:53:05 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:53:06 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r3, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:53:19 executing program 0:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)

03:53:19 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
clock_gettime(0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r3, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:53:19 executing program 5:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r3, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:53:19 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x14e00)

03:53:19 executing program 4:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
pwrite64(0xffffffffffffffff, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r1, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:53:19 executing program 7:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x8000039a}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/software_nodes', 0x4fe8c0, 0x91)
ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
syz_io_uring_setup(0x353f, &(0x7f00000002c0)={0x0, 0x10bf, 0x4, 0x1}, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000fec000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000340))
r2 = syz_io_uring_setup(0xb9b, &(0x7f0000000380)={0x0, 0x1506}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f00000004c0), &(0x7f0000000400))
io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x3, &(0x7f0000000580)={0x0, 0x3f00, 0x0}, 0x0)
pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="13e5e891655b595ab72b026a9a03890c785938538b8a249f2e605ba1da99b12f72e1dac84cf586019392deb06a7ddd67ec1d6fcb4428d92872b7ce0d90c0c84d80434026dd4a5745038aac58b40e2fa6b0c57bca5905adb8b189ea3effb0950f4405ad786b0a13f0a023ae4c96d1e346f499bc7ed73079a1efa2f5419e269b73030f9a7f56f2fc73f762d7cff42ecee6a1cfa56d1735ffb51a130aa3d890f0e576f103a55f8954f3d564abbac0d65e7db3e296a36f18fef5b90f8bcbadb8d75f5c02239741da3b83e1a1fa10d7c82e8c99be139f0b5bb399b99012de215946a1183e17cc15ea1ce17caf6828912329d4fe5779ee64", 0xf5}], 0x1, 0xff, 0xf5)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x4, 0x10010, r2, 0x8000000)
close_range(r0, 0xffffffffffffffff, 0x0)
r3 = syz_io_uring_setup(0xb9b, &(0x7f0000000440), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500))
io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x3, &(0x7f0000000580)={0x0, 0x3f00, 0x0}, 0x0)
pkey_free(0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x3000008, 0xffffffffffffffff)
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
r4 = syz_io_uring_setup(0x257a, &(0x7f00000005c0)={0x0, 0xfffffffc, 0x10}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000500))
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x3, &(0x7f0000000580)={0x0, 0x3f00, 0x0}, 0x0)
ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f00000000c0)={r4})

03:53:19 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(0x0, &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:53:19 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:53:32 executing program 0:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:53:32 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:53:32 executing program 7:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_io_uring_setup(0xb9b, &(0x7f0000000440), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500))
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x3, &(0x7f0000000580)={0x0, 0x3f00, 0x0}, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x80000397}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
close_range(r0, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
syz_io_uring_setup(0x4d84, &(0x7f0000000000)={0x0, 0x43df, 0x4, 0x1, 0x3aa, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
openat$incfs(r2, &(0x7f0000000040)='.pending_reads\x00', 0x280080, 0x8)

03:53:32 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:53:32 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x15000)

03:53:32 executing program 4:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
pwrite64(0xffffffffffffffff, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r1, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:53:32 executing program 5:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, 0x0)
shmctl$IPC_RMID(r0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)

03:53:32 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
clock_gettime(0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r3, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 1576.067321] random: crng reseeded on system resumption
03:53:32 executing program 0:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:53:32 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:53:32 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8000039a}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
r1 = syz_io_uring_setup(0xb9b, &(0x7f0000000440), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500))
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x3, &(0x7f0000000580)={0x0, 0x3f00, 0x0}, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f00000001c0)={0x8000000000, 0x7, 0x0, 0x0, 0x1, [{0x9, 0x7, 0x1, '\x00', 0x101}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
syz_io_uring_setup(0x4d84, &(0x7f0000000000)={0x0, 0x43df, 0x4, 0x1, 0x3aa, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'veth1_to_bridge\x00'})
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'macvtap0\x00'})
r3 = getpid()
fcntl$lock(r1, 0x6, &(0x7f0000000240)={0x3, 0x3, 0x8001, 0x2ac3, r3})

03:53:32 executing program 7:
r0 = syz_open_pts(0xffffffffffffffff, 0x80)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, <r1=>0x0})
ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)=r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = dup3(r2, r2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000140))
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8000039a}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
r4 = openat$incfs(r3, &(0x7f00000001c0)='.log\x00', 0x200080, 0x8)
ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000000200))
close_range(r2, 0xffffffffffffffff, 0x0)

03:53:44 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:53:44 executing program 0:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:53:44 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="54e04c8446bda942c4f8901965a31ff1def26c41d40dc30e052ff6bd1014cb9f30269e74dfd2bcc6732aac8620e316a427e464ad9a901903d42a94a11acd18bce6c2a259ec3aa701bcb54722d9c9e8bfb43d085a1265f8e1be25806d37ed17f06055c830996067f243a1b59c92d50c286a916aac168c2f55bb849dc580a7dac1a159985b608c1f8e274d22127070d4c267bfb3e10863a3d4cf72e46b30981d9558273f4ae339c12c749227b0712ce31045f23bebcb31d40e8a7e6b85edca041aa0c9e78055f4e193ae0224ea09b157a322bb0e02c9a983d290682a436c74d3df5fabcc0914546a1da73a699d7c6d02601d42e62fa885c2a2f6bb566aca8f00ab")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
clock_gettime(0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r3, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:53:44 executing program 4:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="54e04c8446bda942c4f8901965a31ff1def26c41d40dc30e052ff6bd1014cb9f30269e74dfd2bcc6732aac8620e316a427e464ad9a901903d42a94a11acd18bce6c2a259ec3aa701bcb54722d9c9e8bfb43d085a1265f8e1be25806d37ed17f06055c830996067f243a1b59c92d50c286a916aac168c2f55bb849dc580a7dac1a159985b608c1f8e274d22127070d4c267bfb3e10863a3d4cf72e46b30981d9558273f4ae339c12c749227b0712ce31045f23bebcb31d40e8a7e6b85edca041aa0c9e78055f4e193ae0224ea09b157a322bb0e02c9a983d290682a436c74d3df5fabcc0914546a1da73a699d7c6d02601d42e62fa885c2a2f6bb566aca8f00ab")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:53:44 executing program 7:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x4000ae07, 0x0, 0x0, 0x8000039a}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_bridge\x00'})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
syz_io_uring_setup(0x4d84, &(0x7f0000000000)={0x0, 0x43df, 0x0, 0x1, 0x3aa, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'bridge_slave_1\x00'})
syz_io_uring_setup(0x6e17, &(0x7f00000001c0)={0x0, 0xa291, 0x10, 0x0, 0x361, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f00000002c0))
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r1, 0xf505, 0x0)

03:53:44 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:53:44 executing program 5:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:53:44 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x15e00)

03:53:44 executing program 0:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0)

03:53:44 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:53:44 executing program 7:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="54e04c8446bda942c4f8901965a31ff1def26c41d40dc30e052ff6bd1014cb9f30269e74dfd2bcc6732aac8620e316a427e464ad9a901903d42a94a11acd18bce6c2a259ec3aa701bcb54722d9c9e8bfb43d085a1265f8e1be25806d37ed17f06055c830996067f243a1b59c92d50c286a916aac168c2f55bb849dc580a7dac1a159985b608c1f8e274d22127070d4c267bfb3e10863a3d4cf72e46b30981d9558273f4ae339c12c749227b0712ce31045f23bebcb31d40e8a7e6b85edca041aa0c9e78055f4e193ae0224ea09b157a322bb0e02c9a983d290682a436c74d3df5fabcc0914546a1da73a699d7c6d02601d42e62fa885c2a2f6bb566aca8f00ab")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:53:44 executing program 0:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0)

03:53:44 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:53:44 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:53:44 executing program 0:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0)

03:53:44 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x16000)

03:53:44 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:53:44 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:53:45 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(r0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)

03:53:45 executing program 0:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:53:45 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:53:45 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x16e00)

03:53:45 executing program 4:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:53:45 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x5e00)

03:53:45 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 1589.205396] random: crng reseeded on system resumption
03:53:45 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) (fail_nth: 1)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:53:45 executing program 5:
r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$chown(0x4, 0x0, 0xee00, 0x0)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
read$hiddev(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000380)=ANY=[@ANYRES32=r0])
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfc, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
r2 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc3}, 0x0, 0x0, r0)
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = openat$incfs(r1, &(0x7f00000002c0)='.log\x00', 0x2, 0xa)
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0xbd, 0x20, 0xc3, 0x4, 0x0, 0xffffffff, 0x10002, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x1f}, 0x42400, 0x2, 0x1, 0x6, 0x5, 0x7ff, 0xfff9, 0x0, 0x5, 0x0, 0x60}, 0xffffffffffffffff, 0x10, r3, 0x8)
r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x2}, 0x0, 0x0, r4)
r5 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="02", 0x1, 0x0)
keyctl$KEYCTL_MOVE(0x1e, r5, r4, 0xfffffffffffffffe, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000001700)=@keyring={'key_or_keyring:', 0x0, 0xa})
r7 = add_key(&(0x7f0000000540)='syzkaller\x00', &(0x7f0000000580)={'syz', 0x3}, 0xffffffffffffffff, 0x0, r2)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000000140)="f08cf5604550974d1753df870e37d92e309c8fe30a03e8285741fa26ecd96cd2833aec0fd3ecb3", 0x27}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f00000003c0)="6d613b514b86529c691daaf498f905dd400f318f171744b1ca7e11d9fe844092b024dbb2a508ca86c843388729a10d7fb70ca65c4095f1e33d3d8d4620bf35262933efda6ded1ccb4a2d2b20ead8358bb849c909e1edf0b1fa643b6cf8fceacd98679b2a", 0x64}, {&(0x7f0000000300)="fbf8e849273671af4a2aaf34493f1041a14e7d6caf6408755023171f9f4d839ef168950419ec8cdfb49c47", 0x2b}, {0x0}], 0x6, r7)
ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000340))

03:53:45 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

[ 1589.408399] FAULT_INJECTION: forcing a failure.
[ 1589.408399] name failslab, interval 1, probability 0, space 0, times 0
[ 1589.409316] CPU: 0 PID: 12460 Comm: syz-executor.7 Not tainted 6.2.0-next-20230303 #1
[ 1589.409883] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1589.410452] Call Trace:
[ 1589.410634]  <TASK>
[ 1589.410799]  dump_stack_lvl+0xc1/0xf0
[ 1589.411061]  should_fail_ex+0x4b4/0x5b0
[ 1589.411343]  should_failslab+0x9/0x20
[ 1589.411598]  __kmem_cache_alloc_node+0x5b/0x310
[ 1589.411907]  ? do_shmat+0x55d/0x12c0
[ 1589.412173]  kmalloc_trace+0x26/0x120
[ 1589.412433]  do_shmat+0x55d/0x12c0
[ 1589.412683]  ? __pfx_do_shmat+0x10/0x10
[ 1589.412954]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1589.413347]  __x64_sys_shmat+0xd0/0x170
[ 1589.413658]  ? __pfx___x64_sys_shmat+0x10/0x10
[ 1589.413972]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 1589.414328]  do_syscall_64+0x3f/0x90
[ 1589.414578]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1589.414918] RIP: 0033:0x7f10365b9b19
[ 1589.415164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1589.416303] RSP: 002b:00007f1033b2f188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e
[ 1589.416786] RAX: ffffffffffffffda RBX: 00007f10366ccf60 RCX: 00007f10365b9b19
[ 1589.417243] RDX: cf3caed3d8c7cb92 RSI: 0000000020ffc000 RDI: 0000000000000001
[ 1589.417703] RBP: 00007f1033b2f1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1589.418142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1589.418582] R13: 00007ffd07ec24df R14: 00007f1033b2f300 R15: 0000000000022000
[ 1589.419043]  </TASK>
03:53:57 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) (fail_nth: 2)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:53:57 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:53:57 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x17000)

03:53:57 executing program 4:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:53:57 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:53:57 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:53:57 executing program 5:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:53:57 executing program 0:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:54:11 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) (fail_nth: 3)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:54:11 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:54:11 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r0, &(0x7f0000000200)='E', 0x140000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0)
r2 = syz_io_uring_complete(0x0)
openat(r2, &(0x7f0000000080)='./file1\x00', 0x424200, 0x100)
r3 = dup3(r1, r0, 0x80000)
perf_event_open(&(0x7f0000000280)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, r3, 0x0)
syz_io_uring_setup(0x4e24, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendto(r4, 0x0, 0xfffffffffffffe64, 0x0, 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x9, &(0x7f0000000300)=[{0x0, 0x5, 0x80, 0x5f5}, {0x8, 0x8, 0x4, 0x4}, {0x0, 0xd2, 0x6, 0x4}, {0x9, 0x9, 0xa7, 0x1000}, {0x8, 0x8, 0x8, 0x2}, {0x699d, 0x4, 0x46, 0xd83}, {0xc0b, 0x4e, 0x49, 0x1}, {0x9d4, 0x2, 0x5, 0x6}, {0x0, 0x9, 0x37, 0xdc}]}, 0x10)

03:54:11 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x3, 0x8, 0x9, 0x20, 0x0, 0x8, 0x48308, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x9, 0x1}, 0x2008, 0x6, 0x3, 0x0, 0x400, 0x1f, 0x80, 0x0, 0x8, 0x0, 0x6}, 0xffffffffffffffff, 0xc, r0, 0x9)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x9, 0x0, 0x78, 0x0, 0x7fff, 0x800, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000200), 0x2}, 0x6000, 0x7, 0x33, 0x4, 0x4, 0x1, 0x1ff, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x10)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x4d031, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3, 0x1}, 0x49000, 0x0, 0x13b, 0x0, 0x4, 0x4, 0x7, 0x0, 0x1ff, 0x0, 0xfffffffffffffffb}, 0xffffffffffffffff, 0x6, r1, 0xa)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x210000, 0x1)

03:54:11 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x17e00)

03:54:11 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:54:11 executing program 4:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:54:11 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

[ 1615.069225] FAULT_INJECTION: forcing a failure.
[ 1615.069225] name failslab, interval 1, probability 0, space 0, times 0
[ 1615.071025] CPU: 0 PID: 12513 Comm: syz-executor.7 Not tainted 6.2.0-next-20230303 #1
[ 1615.071530] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1615.072040] Call Trace:
[ 1615.072210]  <TASK>
[ 1615.072364]  dump_stack_lvl+0xc1/0xf0
[ 1615.072652]  should_fail_ex+0x4b4/0x5b0
[ 1615.073015]  ? __alloc_file+0x21/0x240
[ 1615.073270]  should_failslab+0x9/0x20
[ 1615.073523]  kmem_cache_alloc+0x5a/0x320
[ 1615.073794]  __alloc_file+0x21/0x240
[ 1615.074063]  alloc_empty_file+0x71/0x190
[ 1615.074337]  alloc_file+0x5e/0x810
[ 1615.074583]  alloc_file_clone+0x26/0xc0
[ 1615.074850]  do_shmat+0x5d8/0x12c0
[ 1615.075117]  ? __pfx_do_shmat+0x10/0x10
[ 1615.075390]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1615.075771]  __x64_sys_shmat+0xd0/0x170
[ 1615.076037]  ? __pfx___x64_sys_shmat+0x10/0x10
[ 1615.076347]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 1615.076693]  do_syscall_64+0x3f/0x90
[ 1615.076940]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1615.077273] RIP: 0033:0x7f10365b9b19
[ 1615.077516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1615.078648] RSP: 002b:00007f1033b2f188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e
[ 1615.079124] RAX: ffffffffffffffda RBX: 00007f10366ccf60 RCX: 00007f10365b9b19
[ 1615.079564] RDX: cf3caed3d8c7cb92 RSI: 0000000020ffc000 RDI: 0000000000000003
[ 1615.080012] RBP: 00007f1033b2f1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1615.080454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1615.080900] R13: 00007ffd07ec24df R14: 00007f1033b2f300 R15: 0000000000022000
[ 1615.081359]  </TASK>
03:54:11 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x0, @local}, {0x2, 0x4e20, @broadcast}, 0x186, 0x0, 0x0, 0x0, 0x100, 0x0, 0x80000000, 0xb510})
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, &(0x7f0000000000)=0x5e, 0x4)
sendto(r0, &(0x7f0000000280)="ee3bc48c71ffa43c048897aef8d277337f04332ffb70654305187a1a01f94cf6a3218494667c7b5693e61b624e4a6a2de76244610545c7daa91f32b2550409e9e430359ba094da74e03f64690a8cb3ac93f1e81a26c00a8796b42d46a77d17267a923f700d2c4f69bae83624692d7cd3f5c8df9cf0cfa2873de584b66c4840b22c2365d9208c98d91c668a2862d689d0cb8cb39e", 0x94, 0xc010, &(0x7f0000000340)=@caif=@rfm={0x25, 0x5, "01770911920fa6b0cf9a6f6b2b34fce1"}, 0x80)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000000c6d0d475c265c4d3d528000000aad3262b085cbf0f88a64dc182aae2eeaa02d18d754f0f7b3d07f49f9c7e0a9be0ef5d23522687091cce9670564ea96446d132899fc5c776a9e701a066a370e11a7819914ac972cac063a6105ca2c290702ec9523be4e3a8142f083487273f3e1e7b4a114d1f8a7f802ca89ed22582c73adb79a2791282f9c03a57e61b195a6e502a2437289175aa69e8fb08", @ANYRES16=r2, @ANYBLOB="88a439d00008000300"/18, @ANYRES32=0x0, @ANYBLOB="0466006c00"], 0x20}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="8c00e6e8", @ANYRES16=r2, @ANYBLOB="00082cbd7000fcdbdf256b0000000a00060008021100000100000a001a0008021100000000000a00060008021100000100000a001a0008021100000000000a001a00ffffffffffff00000a001a0008021100000100000a000600ffffffffffff00000a00060008021100000000000a001a0008021100000000000a0006000802110000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x48000}, 0x880)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000540)='>e1\xa6\xd6\x95{\xf2\xe7}\x9d\xf7~1x\xe1\xdd\xc5};m\xf1\x84G!\x80\xe1\xcaYJ\xc4\xd2\xc4\xd7\xb9\xf7\xc9\xc6\xc8\xeb\x93V\x1f\xf8\xfc\xa4\x16\xc9\x17Z\xac\xb2\x04\x96\xac\xb8f\xa5\xae\x1f\x9dOq\xe6\xd4\xdb\'\x86\x9f\xd3\x88\xc8G\xf1\x7f\x0e*\xcb1\xa5d\xb9a\t+\f\xe0i\xc2\xc9\x8b\xe4\xa1\xf1UM\xfe\xce3#\xff4an=\x8d\x9a)\xdf\x13\xccW\xc4\xa5\x14\xea\x94\x16', &(0x7f0000000840)=')\x00\x02\xa8\xb88\xb2\x00p6\xb19%\xab*\xc40\aM~+\x83\xb8B[D\xc7\xadT\'&[\xab\xc9\xed\x06\x12\x91u\xa4\xdf\xd4\x177\x01x\xcf\x02\xe4\xb5)\x89\x1e\xc6\xd0x*\xc3\x982\xd9Z\x1bLG\xbd0\xa3\\V3(\x15~\xb1\xd1XM\xa5\xfd8\xa7\xc9\x98\xf1f\xdbLs\x00F\xfaL\xe1\v\x7f\x9aY\xff}\xb9@\x16\xc3\x80\x1d\x03\x93\xd0\x99\xb3\x9ax\xf8\x9f\xa4\x1f~\xfdM\xbei3K\x93F\x00\x1b\xe6hMa\xabz\xbaU\x9e8\x05|\"\xa9)\xc9\xa4\xad{\xb6\x84\xca\xf2\x00\f\x94`\x05\xc3~\xc1N\xc5L\xbf\xfe\xcb>\xe5n\xa6\xf7\xe4\xca=\xc6\x1c\x843\x15P\xff\nk\rx]\xe0\v\x0e?\xb0\x88\xe8N\x9c\v;&\x94,\x8c\x88\xe0\x83\xba\xc3\xe8\x16\x0e%]c\x1d\xd7\xf3m\xf5\xbc\xc02\x7f\x19\x9d>a==\xb9U\xf1$\xf7|\xd2\x93{\x93SQ\xaa\xed$\xef\xb3\xeclFR~\x82\x9a\xc9h\xb4@f\xe0Z\x0e?U\xc0G\xb9\xfb#\xe9\x8b\xcd\xfc\xd9\x801Ah\xba4Kc\x02\xcc\xe2u\"\x85\xd1I\xd8\xfb!:Lx*\x8f\xc2\x9cNp<,,\v\xe2_\x8b\xbc\xc4\xb4\x90\xf2\x06\xee[\xb3\xea\'H-\xaf\x19\x00\x9e\xe4|\x88\xa9sg?\xb3\x91\r\x96\xb7\x98\xcf5\xac\xd6j$\xc4\x06\xddy1]c{\xbb\x8f09g\xaf C', 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$sock(r3, &(0x7f0000001f40)=[{{&(0x7f0000000080)=@in={0xa, 0x4e23, @local}, 0x88, 0x0, 0x0, &(0x7f0000000440)=[@mark={{0x14, 0x1, 0x25}}], 0x18}}], 0x1, 0x0)
setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000140)=0x3, 0x4)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x0)

03:54:11 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:54:11 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x18000)

03:54:11 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) (fail_nth: 4)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:54:11 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x7, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000600)=""/148, 0x94)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
memfd_secret(0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff}, './file1\x00'})
perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_config_ext={0x101, 0x7}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0x8)
io_pgetevents(0x0, 0x2, 0x5, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0x0, &(0x7f0000000240)={&(0x7f0000000200), 0x8})
read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0)
syz_open_dev$hiddev(&(0x7f0000000000), 0x800, 0x387000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340))
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000380)={@dev, @local, 0x0, 0x80000, [@broadcast, @multicast2]}, 0x18)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)

03:54:24 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:54:24 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) (fail_nth: 5)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:54:24 executing program 4:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:54:24 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
poll(&(0x7f0000000200)=[{0xffffffffffffffff, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:54:24 executing program 5:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:54:24 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x18e00)

03:54:24 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:54:24 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000000000000}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="73ac99d1e17b71e714e4ffff0100001a684fd2981c8409820000080000000000000000"], 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r1, &(0x7f0000002600)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x8004)
sendmmsg$inet6(r1, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000080)="941ec779750fea938762c0e95d981b16d512c3d6dc445b7158", 0x19}, {&(0x7f00000000c0)="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", 0xad7}], 0x2}}], 0x1, 0x0)
socketpair(0x2, 0x4, 0xe83e, &(0x7f0000000bc0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000d00)=ANY=[@ANYBLOB="20000000040a010800000000000000000a0000080900050073797a30000000001de3d20b3e9d160e6e4c2a8062b00600000000000000525c8d46ccff978b"], 0x20}}, 0x40)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$trusted_overlay_origin(r0, &(0x7f00000001c0), &(0x7f0000000200), 0x2, 0x3)
fallocate(r4, 0x0, 0x0, 0x87ffffc)
finit_module(0xffffffffffffffff, &(0x7f0000000180)='\x00', 0x2)
syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000))

[ 1628.688311] FAULT_INJECTION: forcing a failure.
[ 1628.688311] name failslab, interval 1, probability 0, space 0, times 0
[ 1628.689417] CPU: 1 PID: 12556 Comm: syz-executor.7 Not tainted 6.2.0-next-20230303 #1
[ 1628.690124] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1628.690841] Call Trace:
[ 1628.691075]  <TASK>
[ 1628.691284]  dump_stack_lvl+0xc1/0xf0
[ 1628.691643]  should_fail_ex+0x4b4/0x5b0
[ 1628.692019]  ? security_file_alloc+0x38/0x170
[ 1628.692443]  should_failslab+0x9/0x20
[ 1628.692790]  kmem_cache_alloc+0x5a/0x320
[ 1628.693166]  security_file_alloc+0x38/0x170
[ 1628.693495]  __alloc_file+0xb6/0x240
[ 1628.693749]  alloc_empty_file+0x71/0x190
[ 1628.694028]  alloc_file+0x5e/0x810
[ 1628.694273]  alloc_file_clone+0x26/0xc0
[ 1628.694537]  do_shmat+0x5d8/0x12c0
[ 1628.694784]  ? __pfx_do_shmat+0x10/0x10
[ 1628.695052]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1628.695432]  __x64_sys_shmat+0xd0/0x170
[ 1628.695698]  ? __pfx___x64_sys_shmat+0x10/0x10
[ 1628.696002]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 1628.696349]  do_syscall_64+0x3f/0x90
[ 1628.696599]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1628.696930] RIP: 0033:0x7f10365b9b19
[ 1628.697172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1628.698274] RSP: 002b:00007f1033b2f188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e
[ 1628.698743] RAX: ffffffffffffffda RBX: 00007f10366ccf60 RCX: 00007f10365b9b19
[ 1628.699179] RDX: cf3caed3d8c7cb92 RSI: 0000000020ffc000 RDI: 0000000000000005
[ 1628.699621] RBP: 00007f1033b2f1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1628.700058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1628.700497] R13: 00007ffd07ec24df R14: 00007f1033b2f300 R15: 0000000000022000
[ 1628.700952]  </TASK>
03:54:25 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) (fail_nth: 6)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:54:25 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x19000)

03:54:25 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) (fail_nth: 7)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:54:25 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x10000385}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000000, 0x4010110, r1, 0x0)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_WRITE={0x17, 0x5, 0x2007, @fd=r3, 0x3, &(0x7f0000000080)="9058edf7f7bcd73f73b61ae7e7c15e0cf33b33f0737ab32796f8d6eea8af090f59c6c8dcc58506561d060d6a5f73de87c41b4ca27cf6817c2d0862792319143885d4ffc5c72164dc", 0x48, 0x1c, 0x1}, 0x7)

03:54:25 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', 0x0)
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}]}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:54:25 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

[ 1629.026764] FAULT_INJECTION: forcing a failure.
[ 1629.026764] name failslab, interval 1, probability 0, space 0, times 0
[ 1629.027801] CPU: 1 PID: 12576 Comm: syz-executor.7 Not tainted 6.2.0-next-20230303 #1
[ 1629.028308] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1629.028827] Call Trace:
[ 1629.029009]  <TASK>
[ 1629.029170]  dump_stack_lvl+0xc1/0xf0
[ 1629.029441]  should_fail_ex+0x4b4/0x5b0
[ 1629.029726]  ? vm_area_dup+0x20/0x160
[ 1629.029986]  should_failslab+0x9/0x20
[ 1629.030258]  kmem_cache_alloc+0x5a/0x320
[ 1629.030548]  vm_area_dup+0x20/0x160
[ 1629.030797]  __split_vma+0x173/0x770
[ 1629.031057]  ? __pfx___split_vma+0x10/0x10
[ 1629.031344]  ? mark_lock.part.0+0xef/0x2f30
[ 1629.031649]  ? lock_is_held_type+0x9f/0x120
[ 1629.031939]  ? __pfx_mark_lock.part.0+0x10/0x10
[ 1629.032269]  do_vmi_align_munmap.constprop.0+0x2a8/0x1180
[ 1629.032644]  ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10
[ 1629.033047]  ? mas_find+0x257/0xe60
[ 1629.033315]  do_vmi_munmap+0x1ec/0x2c0
[ 1629.033590]  mmap_region+0x1f1/0x2510
[ 1629.033850]  ? lock_acquire.part.0+0xea/0x320
[ 1629.034171]  ? __pfx_mmap_region+0x10/0x10
[ 1629.034462]  ? security_mmap_addr+0x7d/0xa0
[ 1629.034763]  ? get_unmapped_area+0x1e9/0x3e0
[ 1629.035071]  do_mmap+0x82c/0xf50
[ 1629.035315]  do_shmat+0xf8d/0x12c0
[ 1629.035578]  ? __pfx_do_shmat+0x10/0x10
[ 1629.035861]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1629.036265]  __x64_sys_shmat+0xd0/0x170
[ 1629.036547]  ? __pfx___x64_sys_shmat+0x10/0x10
[ 1629.036866]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 1629.037227]  do_syscall_64+0x3f/0x90
[ 1629.037487]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1629.037832] RIP: 0033:0x7f10365b9b19
[ 1629.038095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1629.039229] RSP: 002b:00007f1033b2f188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e
[ 1629.039717] RAX: ffffffffffffffda RBX: 00007f10366ccf60 RCX: 00007f10365b9b19
[ 1629.040181] RDX: cf3caed3d8c7cb92 RSI: 0000000020ffc000 RDI: 0000000000000007
[ 1629.040634] RBP: 00007f1033b2f1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1629.041085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1629.041548] R13: 00007ffd07ec24df R14: 00007f1033b2f300 R15: 0000000000022000
[ 1629.042029]  </TASK>
03:54:25 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) (fail_nth: 8)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:54:39 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) (fail_nth: 9)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:54:39 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', 0x0)
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}]}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:54:39 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x19e00)

03:54:39 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', 0x0)
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}]}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:54:39 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:54:39 executing program 4:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:54:39 executing program 5:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', 0x0)
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}]}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:54:39 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
poll(&(0x7f0000000200)=[{0xffffffffffffffff, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 1643.547053] FAULT_INJECTION: forcing a failure.
[ 1643.547053] name failslab, interval 1, probability 0, space 0, times 0
[ 1643.548602] CPU: 1 PID: 12594 Comm: syz-executor.7 Not tainted 6.2.0-next-20230303 #1
[ 1643.549626] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1643.550698] Call Trace:
[ 1643.551049]  <TASK>
[ 1643.551376]  dump_stack_lvl+0xc1/0xf0
[ 1643.551905]  should_fail_ex+0x4b4/0x5b0
[ 1643.552485]  ? vm_area_dup+0x52/0x160
[ 1643.553005]  should_failslab+0x9/0x20
[ 1643.553532]  kmem_cache_alloc+0x5a/0x320
[ 1643.554097]  vm_area_dup+0x52/0x160
[ 1643.554615]  __split_vma+0x173/0x770
[ 1643.555122]  ? __pfx___split_vma+0x10/0x10
[ 1643.555696]  ? mark_lock.part.0+0xef/0x2f30
[ 1643.556339]  ? lock_is_held_type+0x9f/0x120
[ 1643.556931]  ? __pfx_mark_lock.part.0+0x10/0x10
[ 1643.557598]  do_vmi_align_munmap.constprop.0+0x2a8/0x1180
[ 1643.558390]  ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10
[ 1643.559221]  ? mas_find+0x257/0xe60
[ 1643.559763]  do_vmi_munmap+0x1ec/0x2c0
[ 1643.560324]  mmap_region+0x1f1/0x2510
[ 1643.560854]  ? lock_acquire.part.0+0xea/0x320
[ 1643.561494]  ? __pfx_mmap_region+0x10/0x10
[ 1643.562085]  ? security_mmap_addr+0x7d/0xa0
[ 1643.562736]  ? get_unmapped_area+0x1e9/0x3e0
[ 1643.563381]  do_mmap+0x82c/0xf50
[ 1643.563866]  do_shmat+0xf8d/0x12c0
[ 1643.564422]  ? __pfx_do_shmat+0x10/0x10
[ 1643.564987]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1643.565822]  __x64_sys_shmat+0xd0/0x170
[ 1643.566449]  ? __pfx___x64_sys_shmat+0x10/0x10
[ 1643.567093]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 1643.567830]  do_syscall_64+0x3f/0x90
[ 1643.568373]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1643.569069] RIP: 0033:0x7f10365b9b19
[ 1643.569658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1643.572188] RSP: 002b:00007f1033b2f188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e
[ 1643.573245] RAX: ffffffffffffffda RBX: 00007f10366ccf60 RCX: 00007f10365b9b19
[ 1643.574243] RDX: cf3caed3d8c7cb92 RSI: 0000000020ffc000 RDI: 0000000000000009
[ 1643.575207] RBP: 00007f1033b2f1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1643.576209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1643.577191] R13: 00007ffd07ec24df R14: 00007f1033b2f300 R15: 0000000000022000
[ 1643.578206]  </TASK>
03:54:39 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:54:39 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', 0x0)
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}]}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:54:39 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) (fail_nth: 10)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:54:40 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:54:40 executing program 0:
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x6, 0x0, 0x20, 0x81, 0x6, 0x89})
perf_event_open(&(0x7f0000000100)={0x2, 0x7b, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x42, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001480))
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340))
ioctl$CDROMPAUSE(0xffffffffffffffff, 0x5301)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0xb0000007})
ioctl$TIOCGPTPEER(r2, 0x5441, 0x4000)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f00000004c0))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x30000004})
r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001280))
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000004b80)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:54:40 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:54:40 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x2, 0x3, 0x30, 0x0, 0x138c622d, 0x4, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0xffffffff80000000}, 0x11080, 0xffffffffffff3e99, 0x7, 0x8, 0xff, 0x7, 0x8, 0x0, 0x7f, 0x0, 0x100000001}, 0x0, 0xa, r0, 0x2)
symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00')

03:54:40 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x1a000)

03:54:40 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:54:40 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) (fail_nth: 11)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

[ 1644.007661] FAULT_INJECTION: forcing a failure.
[ 1644.007661] name failslab, interval 1, probability 0, space 0, times 0
[ 1644.009394] CPU: 1 PID: 12635 Comm: syz-executor.7 Not tainted 6.2.0-next-20230303 #1
[ 1644.010387] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1644.011378] Call Trace:
[ 1644.011715]  <TASK>
[ 1644.012018]  dump_stack_lvl+0xc1/0xf0
[ 1644.012530]  should_fail_ex+0x4b4/0x5b0
[ 1644.013103]  ? mas_alloc_nodes+0x402/0x8a0
[ 1644.013669]  should_failslab+0x9/0x20
[ 1644.014191]  kmem_cache_alloc+0x5a/0x320
[ 1644.014753]  mas_alloc_nodes+0x402/0x8a0
[ 1644.015293]  mas_preallocate+0x1bf/0x370
[ 1644.015861]  __split_vma+0x191/0x770
[ 1644.016376]  ? __pfx___split_vma+0x10/0x10
[ 1644.016939]  ? __pfx_perf_trace_lock+0x10/0x10
[ 1644.017560]  ? mark_lock.part.0+0xef/0x2f30
[ 1644.018158]  ? lock_is_held_type+0x9f/0x120
[ 1644.018744]  ? __pfx_mark_lock.part.0+0x10/0x10
[ 1644.019399]  do_vmi_align_munmap.constprop.0+0x2a8/0x1180
[ 1644.020144]  ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10
[ 1644.020925]  ? mas_find+0x257/0xe60
[ 1644.021438]  do_vmi_munmap+0x1ec/0x2c0
[ 1644.021963]  mmap_region+0x1f1/0x2510
[ 1644.022466]  ? lock_acquire.part.0+0xea/0x320
[ 1644.023066]  ? __pfx_mmap_region+0x10/0x10
[ 1644.023637]  ? security_mmap_addr+0x7d/0xa0
[ 1644.024242]  ? get_unmapped_area+0x1e9/0x3e0
[ 1644.024854]  do_mmap+0x82c/0xf50
[ 1644.025323]  do_shmat+0xf8d/0x12c0
[ 1644.025831]  ? __pfx_do_shmat+0x10/0x10
[ 1644.026384]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1644.027150]  __x64_sys_shmat+0xd0/0x170
[ 1644.027700]  ? __pfx___x64_sys_shmat+0x10/0x10
[ 1644.028314]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
03:54:40 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

[ 1644.029010]  do_syscall_64+0x3f/0x90
[ 1644.029637]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1644.030276] RIP: 0033:0x7f10365b9b19
[ 1644.030727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1644.032818] RSP: 002b:00007f1033b2f188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e
[ 1644.033720] RAX: ffffffffffffffda RBX: 00007f10366ccf60 RCX: 00007f10365b9b19
[ 1644.034554] RDX: cf3caed3d8c7cb92 RSI: 0000000020ffc000 RDI: 000000000000000b
[ 1644.035377] RBP: 00007f1033b2f1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1644.036217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1644.037036] R13: 00007ffd07ec24df R14: 00007f1033b2f300 R15: 0000000000022000
[ 1644.037885]  </TASK>
03:54:40 executing program 5:
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x4}}, './file0\x00'})
accept$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e24, 0x16000000, @mcast1, 0x4}}, 0x0, 0x0, 0x15, 0x0, "5c5d3828b95819bc8e2319145c360c2ae45efa46716fc4ff384494b0ea69e018fdc31fc1a5d774daf102c88c496cb6160ebc3427f7a9a74e2b3644d0d6d2e4becadd7744251606d5c8c6ede65974a2c8"}, 0xd8)

03:54:40 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:54:40 executing program 4:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:54:40 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:54:41 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
poll(&(0x7f0000000200)=[{0xffffffffffffffff, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:54:41 executing program 5:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x591080, 0x0)
fcntl$addseals(r0, 0x409, 0x4)
prlimit64(0x0, 0x8, &(0x7f0000000040), 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0)
prlimit64(0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000180))
fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000080)=0x3)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
r3 = getpid()
prlimit64(r3, 0x0, &(0x7f0000000000), 0x0)
prlimit64(r3, 0x1, &(0x7f0000000200)={0x9, 0x4}, 0x0)
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
syz_io_uring_setup(0x4d84, &(0x7f0000000240)={0x0, 0x43df, 0x4, 0x1, 0x3aa}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f00000001c0))
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x5000)

03:54:41 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:54:41 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x1ae00)

03:54:41 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) (fail_nth: 12)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:54:58 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r3, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:54:58 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = clone3(0x0, 0x0)
kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0)
r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f00000001c0)='./file0\x00')
renameat(r2, &(0x7f0000000140)='./file0/file0\x00', r2, &(0x7f0000000180)='./file1\x00')

03:54:58 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:54:58 executing program 4:
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r0, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r1, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:54:58 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) (fail_nth: 13)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:54:58 executing program 5:
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x0, 0x0, 0x20, 0x81, 0x6, 0x89})
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$packet(0x11, 0x2, 0x300)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f00000000c0))
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300))
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=<r2=>0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f00000004c0))
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
clone3(0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r3, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
syz_io_uring_setup(0x4d84, &(0x7f0000000000)={0x0, 0x43df, 0x4, 0x1, 0x3aa, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
epoll_pwait(r3, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000100)={[0x8cb1]}, 0x8)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000340)={0x0, "b140cb8a0c1b0adfede565b42b7301ba"})
ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0261dc30", @ANYRESDEC=0x0, @ANYBLOB="feffffff00c06d560916641f8f44bbf0bdfe00c7137638da43f4a306d2fc0bab31b8"])
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pidfd_open(r2, 0x0)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:54:58 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, 0x0, &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:54:58 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x1b000)

[ 1661.787979] FAULT_INJECTION: forcing a failure.
[ 1661.787979] name failslab, interval 1, probability 0, space 0, times 0
[ 1661.789357] CPU: 1 PID: 12682 Comm: syz-executor.7 Not tainted 6.2.0-next-20230303 #1
[ 1661.790046] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1661.790766] Call Trace:
[ 1661.790999]  <TASK>
[ 1661.791205]  dump_stack_lvl+0xc1/0xf0
[ 1661.791560]  should_fail_ex+0x4b4/0x5b0
[ 1661.791937]  should_failslab+0x9/0x20
[ 1661.792290]  kmem_cache_alloc_bulk+0x72/0x6a0
[ 1661.792701]  ? trace_kmem_cache_alloc+0xa1/0xe0
[ 1661.793138]  ? kmem_cache_alloc+0x1d2/0x320
[ 1661.793535]  mas_alloc_nodes+0x276/0x8a0
[ 1661.793911]  mas_preallocate+0x1bf/0x370
[ 1661.794289]  __split_vma+0x191/0x770
[ 1661.794635]  ? perf_trace_lock_acquire+0xcf/0x500
[ 1661.795069]  ? __pfx___split_vma+0x10/0x10
[ 1661.795449]  ? mark_lock.part.0+0xef/0x2f30
[ 1661.795848]  ? lock_is_held_type+0x9f/0x120
[ 1661.796236]  ? __pfx_mark_lock.part.0+0x10/0x10
[ 1661.796671]  do_vmi_align_munmap.constprop.0+0x2a8/0x1180
[ 1661.797167]  ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10
[ 1661.797710]  ? mas_find+0x257/0xe60
[ 1661.798070]  do_vmi_munmap+0x1ec/0x2c0
[ 1661.798432]  mmap_region+0x1f1/0x2510
[ 1661.798802]  ? lock_acquire.part.0+0xea/0x320
[ 1661.799221]  ? __pfx_mmap_region+0x10/0x10
[ 1661.799618]  ? security_mmap_addr+0x7d/0xa0
[ 1661.800022]  ? get_unmapped_area+0x1e9/0x3e0
[ 1661.800445]  do_mmap+0x82c/0xf50
[ 1661.800776]  do_shmat+0xf8d/0x12c0
[ 1661.801129]  ? __pfx_do_shmat+0x10/0x10
[ 1661.801504]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1661.802041]  __x64_sys_shmat+0xd0/0x170
[ 1661.802417]  ? __pfx___x64_sys_shmat+0x10/0x10
[ 1661.802848]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 1661.803333]  do_syscall_64+0x3f/0x90
[ 1661.803681]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1661.804147] RIP: 0033:0x7f10365b9b19
[ 1661.804484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1661.806033] RSP: 002b:00007f1033b2f188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e
[ 1661.806702] RAX: ffffffffffffffda RBX: 00007f10366ccf60 RCX: 00007f10365b9b19
[ 1661.807323] RDX: cf3caed3d8c7cb92 RSI: 0000000020ffc000 RDI: 000000000000000d
[ 1661.807938] RBP: 00007f1033b2f1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1661.808558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1661.809169] R13: 00007ffd07ec24df R14: 00007f1033b2f300 R15: 0000000000022000
[ 1661.809814]  </TASK>
03:54:58 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:54:58 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) (fail_nth: 14)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:54:58 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab', 0x0, 0x0)
getdents64(r0, &(0x7f0000000240)=""/226, 0x20000258)
ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000000))

03:54:58 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x1be00)

03:54:58 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, 0x0, &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:54:58 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000bc0)}, 0xc0002210)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setuid(r0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x409800, 0x30)
r1 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000b40))
process_vm_writev(r1, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)

03:54:58 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x1c000)

03:54:58 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

[ 1662.514651] Process accounting resumed
[ 1662.739501] Process accounting resumed
03:55:11 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:55:11 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x1ce00)

03:55:11 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, 0x0, &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:55:11 executing program 4:
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r0, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r1, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:55:11 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:55:11 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000bc0)}, 0xc0002210)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setuid(r0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x409800, 0x30)
r1 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000b40))
process_vm_writev(r1, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)

03:55:11 executing program 5:
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x0, 0x0, 0x20, 0x81, 0x6, 0x89})
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$packet(0x11, 0x2, 0x300)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f00000000c0))
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300))
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=<r2=>0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f00000004c0))
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
clone3(0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r3, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
syz_io_uring_setup(0x4d84, &(0x7f0000000000)={0x0, 0x43df, 0x4, 0x1, 0x3aa, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
epoll_pwait(r3, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000100)={[0x8cb1]}, 0x8)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000340)={0x0, "b140cb8a0c1b0adfede565b42b7301ba"})
ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0261dc30", @ANYRESDEC=0x0, @ANYBLOB="feffffff00c06d560916641f8f44bbf0bdfe00c7137638da43f4a306d2fc0bab31b8"])
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pidfd_open(r2, 0x0)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:55:11 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r3, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:55:12 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x1d000)

03:55:12 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', 0x0, 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

[ 1676.322148] Process accounting resumed
03:55:27 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:55:27 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x1de00)

03:55:27 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', 0x0, 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:55:27 executing program 5:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, 0x0, &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:55:27 executing program 4:
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r0, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r1, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:55:27 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000bc0)}, 0xc0002210)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setuid(r0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x409800, 0x30)
r1 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000b40))
process_vm_writev(r1, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)

03:55:27 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r3, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:55:27 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40000007, 0x18180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xca8}, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:55:27 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ff7000/0x1000)=nil)
r1 = geteuid()
statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = getpgid(0x0)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x2, r1, r2, 0xffffffffffffffff, 0xee01, 0x40, 0x1}, 0x1ff, 0x8, 0xa4fb, 0x4, 0x0, r3, 0x9})
r4 = timerfd_create(0x4, 0x80000)
close(r4)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r5, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:55:28 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:55:28 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
syz_io_uring_setup(0x4d84, &(0x7f0000000000)={0x0, 0x43df, 0x4, 0x1, 0x3a7, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180))
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x400)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)
r2 = shmget(0x2, 0x9000, 0x80, &(0x7f0000ff2000/0x9000)=nil)
shmctl$IPC_STAT(r2, 0x2, &(0x7f00000001c0)=""/18)

03:55:28 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', 0x0, 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

[ 1691.871489] Process accounting resumed
03:55:28 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000bc0)}, 0xc0002210)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setuid(r0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x409800, 0x30)
r1 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000b40))
process_vm_writev(r1, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)

03:55:28 executing program 5:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, 0x0, &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:55:28 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x1e000)

03:55:28 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x0, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:55:28 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000003, 0x80010, 0xffffffffffffffff, 0x361ee000)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
r1 = shmget(0x3, 0x14000, 0x78000000, &(0x7f0000fe9000/0x14000)=nil)
shmctl$IPC_RMID(r1, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
madvise(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0)
mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/11)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:55:28 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

[ 1693.547526] Process accounting resumed
03:55:45 executing program 0:
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r0, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r1, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:55:45 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r3, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:55:45 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:55:45 executing program 5:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, 0x0, &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:55:45 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000340)=""/95)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r0, {0x1}}, './file0\x00'})
mmap$perf(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x200000e, 0x110, r2, 0x6)
shmctl$IPC_RMID(0x0, 0x0)

03:55:45 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x1ee00)

03:55:45 executing program 4:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:55:45 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x0, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:55:45 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x1f000)

03:55:58 executing program 5:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:55:58 executing program 4:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:55:58 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r3, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:55:58 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x1fe00)

03:55:58 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x0, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:55:58 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x0, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:55:58 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:55:58 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0)=@known='system.posix_acl_default\x00')
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffb000/0x3000)=nil)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)
r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$IPC_RMID(r1, 0xc)
shmctl$IPC_RMID(r1, 0x0)
shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x2000)

03:55:58 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:55:58 executing program 5:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:55:58 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x20000)

03:55:58 executing program 5:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:55:58 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x20e00)

03:56:11 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:56:11 executing program 5:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:56:11 executing program 7:
r0 = syz_io_uring_setup(0xb9b, &(0x7f0000000440), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500))
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x3, &(0x7f0000000580)={0x0, 0x3f00, 0x0}, 0x0)
fcntl$setstatus(r0, 0x4, 0x46800)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:56:11 executing program 0:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:56:11 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:56:11 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x21000)

03:56:11 executing program 4:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:56:11 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="54e04c8446bda942c4f8901965a31ff1def26c41d40dc30e052ff6bd1014cb9f30269e74dfd2bcc6732aac8620e316a427e464ad9a901903d42a94a11acd18bce6c2a259ec3aa701bcb54722d9c9e8bfb43d085a1265f8e1be25806d37ed17f06055c830996067f243a1b59c92d50c286a916aac168c2f55bb849dc580a7dac1a159985b608c1f8e274d22127070d4c267bfb3e10863a3d4cf72e46b30981d9558273f4ae339c12c749227b0712ce31045f23bebcb31d40e8a7e6b85edca041aa0c9e78055f4e193ae0224ea09b157a322bb0e02c9a983d290682a436c74d3df5fabcc0914546a1da73a699d7c6d02601d42e62fa885c2a2f6bb566aca8f00ab")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r3, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:56:12 executing program 0:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:56:12 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:56:12 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x21e00)

03:56:12 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:56:12 executing program 5:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:56:12 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x7}}, './file0\x00'})
ioctl$SNAPSHOT_FREE(r1, 0x3305)

03:56:12 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r1}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r1}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:56:12 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:56:12 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x4, 0x1, 0x9, 0x3f, 0x0, 0x0, 0x14021, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa33d, 0x2, @perf_config_ext={0xd71, 0x5}, 0x800, 0x9a8, 0xb7c, 0x8, 0xeb64, 0x5, 0x0, 0x0, 0x7, 0x0, 0x6}, 0x0, 0xe, r0, 0x9)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)
r2 = syz_io_uring_setup(0xb9b, &(0x7f0000000440), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500))
io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x3, &(0x7f0000000580)={0x0, 0x3f00, 0x0}, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000000))

03:56:12 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x22000)

03:56:12 executing program 0:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:56:25 executing program 4:
r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x80, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:56:25 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r1}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r1}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:56:25 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmctl$SHM_LOCK(r0, 0xb)
shmctl$IPC_RMID(r0, 0xc)
shmctl$IPC_RMID(r0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:56:25 executing program 5:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:56:25 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x22e00)

03:56:25 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:56:25 executing program 0:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:56:25 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r3, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:56:26 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x7000)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:56:26 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x23000)

03:56:26 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r1}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r1}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:56:26 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r1}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r1}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:56:26 executing program 5:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:56:26 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:56:26 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x23e00)

03:56:26 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, 0x0, &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:56:40 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:56:40 executing program 0:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:56:40 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r3, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:56:40 executing program 4:
r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x80, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:56:40 executing program 5:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:56:40 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x2080, 0x0, 0x0, 0x9, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_complete(0x0)
r2 = perf_event_open$cgroup(&(0x7f0000000180)={0x3, 0x80, 0x1f, 0x0, 0x3, 0x3f, 0x0, 0x6f5a, 0x10480, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0xc}, 0x400, 0xfffffffffffffffe, 0x10000, 0x3, 0x4, 0x1f, 0x1, 0x0, 0xda20, 0x0, 0xfff}, 0xffffffffffffffff, 0x9, r0, 0x1)
perf_event_open$cgroup(&(0x7f0000000100)={0x5, 0x80, 0x2, 0xf2, 0x1, 0x4, 0x0, 0x9, 0x10245, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x8f, 0x12c, 0x9, 0x7fffffff, 0x3498, 0x2, 0x0, 0x9, 0x0, 0x7f}, r1, 0x7, r2, 0x9)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r3, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:56:40 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x24000)

03:56:40 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, 0x0, &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:56:40 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x24e00)

03:56:40 executing program 0:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:56:40 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, 0x0, &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:56:40 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f00000003c0)=""/4096)
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)
r2 = syz_io_uring_setup(0xb9b, &(0x7f0000000440), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500))
io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x3, &(0x7f0000000580)={0x0, 0x3f00, 0x0}, 0x0)
sendfile(r2, r0, 0x0, 0x40)

03:56:40 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x25000)

03:56:53 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:56:53 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x25e00)

03:56:53 executing program 0:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:56:53 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:56:53 executing program 4:
r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x80, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:56:53 executing program 5:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r3, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:56:53 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r3, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:56:53 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:56:53 executing program 0:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:56:53 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:56:54 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x2010, r0, 0x7)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:56:54 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:56:54 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:56:54 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:56:54 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x26000)

03:56:54 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmctl$SHM_LOCK(r0, 0xb)
shmctl$IPC_RMID(r0, 0xc)
shmctl$IPC_RMID(r0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
r2 = getpid()
r3 = fcntl$dupfd(r1, 0x406, r1)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x8, 0x81, 0xd2, 0xff, 0x0, 0x2, 0x98904, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xe8, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x400, 0x101, 0x8, 0x2, 0x0, 0x0, 0xada0, 0x0, 0xddab, 0x0, 0x2}, r2, 0x0, r3, 0x1)
shmctl$IPC_RMID(0x0, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r4, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r4, &(0x7f0000ff3000/0x3000)=nil, 0x3000)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:56:54 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:56:54 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x34, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:56:54 executing program 0:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:56:54 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:57:07 executing program 4:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:57:07 executing program 5:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r3, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:57:07 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x26e00)

03:57:07 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:57:07 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmctl$SHM_LOCK(r0, 0xb)
shmctl$IPC_RMID(r0, 0xc)
shmctl$IPC_RMID(r0, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_io_uring_setup(0xb9b, &(0x7f0000000440), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500))
io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x3, &(0x7f0000000580)={0x0, 0x3f00, 0x0}, 0x0)
syncfs(r2)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r3, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x9, 0x1f, 0x1, 0x2, 0x0, 0x81, 0x94, 0x11, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x0, 0xffffffffffffff4c, 0xfffffff7, 0x0, 0x101, 0x7, 0x5f8, 0x0, 0x3, 0x0, 0x409}, 0x0, 0x6, r1, 0x8)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:57:07 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x34, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:57:07 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="54e04c8446bda942c4f8901965a31ff1def26c41d40dc30e052ff6bd1014cb9f30269e74dfd2bcc6732aac8620e316a427e464ad9a901903d42a94a11acd18bce6c2a259ec3aa701bcb54722d9c9e8bfb43d085a1265f8e1be25806d37ed17f06055c830996067f243a1b59c92d50c286a916aac168c2f55bb849dc580a7dac1a159985b608c1f8e274d22127070d4c267bfb3e10863a3d4cf72e46b30981d9558273f4ae339c12c749227b0712ce31045f23bebcb31d40e8a7e6b85edca041aa0c9e78055f4e193ae0224ea09b157a322bb0e02c9a983d290682a436c74d3df5fabcc0914546a1da73a699d7c6d02601d42e62fa885c2a2f6bb566aca8f00ab")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r3, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:57:07 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x34, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:57:07 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$IPC_RMID(r1, 0xc)
shmat(r1, &(0x7f0000ff6000/0x3000)=nil, 0x2000)
r2 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffd000/0x1000)=nil)
shmat(r2, &(0x7f0000fef000/0x3000)=nil, 0x4000)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:57:07 executing program 0:
r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x80, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:57:07 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x27000)

03:57:07 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x34, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:57:07 executing program 7:
shmat(0x0, &(0x7f0000fed000/0x2000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$IPC_RMID(r1, 0xc)
r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmctl$SHM_LOCK(r2, 0xb)
shmctl$IPC_RMID(r2, 0xc)
r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000ff4000/0x2000)=nil, 0x3000)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:57:07 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:57:23 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:57:23 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x27e00)

03:57:23 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmctl$SHM_LOCK(r0, 0xb)
r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$IPC_RMID(r1, 0xc)
r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmctl$IPC_RMID(r2, 0xc)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/51)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0xa7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r3, &(0x7f0000ff1000/0x1000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r3, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)
shmctl$IPC_RMID(r3, 0x0)

03:57:23 executing program 0:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r3, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:57:23 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:57:23 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r3, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:57:23 executing program 5:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r3, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:57:23 executing program 4:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:57:23 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffc, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x4, 0x0, 0xfe, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)

03:57:24 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x28000)

03:57:24 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:57:24 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x4000)=nil, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xc2, 0x84, 0x0, 0x0, 0x0, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x104000000, 0x100000000}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
r0 = syz_io_uring_setup(0x133, &(0x7f00000001c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x1532, &(0x7f0000000000)={0x0, 0x2769, 0x0, 0x3, 0x20c}, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r3=>0x0)
r4 = memfd_create(&(0x7f0000000180)='$(&\x00', 0x2)
syz_io_uring_setup(0x7338, &(0x7f00000003c0)={0x0, 0x5e71, 0x8, 0x1, 0x43, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000300))
syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd=r4, 0x5, 0x0, 0x3ff}, 0x6)
r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r6 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r6, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r6, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)
shmctl$IPC_RMID(r6, 0x0)
mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000005, 0x8010, r5, 0xb1b)

03:57:24 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:57:24 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x28e00)

03:57:24 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x28102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x3000)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:57:24 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:57:25 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x29000)

03:57:25 executing program 7:
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000))
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x3a1801, 0x0)
shmctl$IPC_INFO(r0, 0x3, &(0x7f00000003c0)=""/4096)

03:57:37 executing program 0:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r3, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:57:37 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x34, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:57:37 executing program 5:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:57:37 executing program 4:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:57:37 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
r0 = shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x5000)
shmdt(r0)
shmdt(r0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r1 = shmget(0x0, 0x3000, 0x5af, &(0x7f0000ff4000/0x3000)=nil)
shmctl$IPC_RMID(r1, 0x0)
r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
r3 = syz_open_dev$mouse(&(0x7f0000000040), 0x8, 0xc0)
perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x80, 0x1, 0x20, 0x1, 0x0, 0x0, 0x1020a, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0xa10, 0x878, 0xffffffff, 0x1, 0x1, 0x800, 0x80, 0x0, 0x8001, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x2, r3, 0x2)
shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95)
shmat(r2, &(0x7f0000fff000/0x1000)=nil, 0x2000)
shmctl$SHM_LOCK(0xffffffffffffffff, 0xb)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:57:37 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r3, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:57:37 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x29e00)

03:57:37 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:57:37 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x2a000)

03:57:37 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x34, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:57:37 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:57:37 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x2ae00)

03:57:37 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x34, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:57:37 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x2, 0x9, 0xff, 0x43, 0x0, 0x2000000000, 0x40, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x4, @perf_bp={&(0x7f0000000040)}, 0x20, 0x40, 0x100, 0x8, 0x20, 0x1e0, 0x68a7, 0x0, 0xac92, 0x0, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0xb)
r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000ff8000/0x2000)=nil)
shmat(r0, &(0x7f0000ff0000/0x2000)=nil, 0x1800)
r1 = getpid()
prlimit64(r1, 0x0, &(0x7f0000000000), 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x4, 0x1f, 0x0, 0x7fffffff, 0x80, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000000), 0x3}, 0xe049, 0x1, 0x4, 0x3, 0x9, 0x18, 0x391a, 0x0, 0x7, 0x0, 0x6}, r1, 0x10, 0xffffffffffffffff, 0x9)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r2 = shmget$private(0x0, 0xa000, 0xd43cdf6b45bbd277, &(0x7f0000ff4000/0xa000)=nil)
shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000100)=""/251)
r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r3, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:57:37 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x2b000)

03:57:37 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x8ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}, 0x11832}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r1 = shmget(0x0, 0x3000, 0x1, &(0x7f0000fed000/0x3000)=nil)
shmctl$SHM_LOCK(r1, 0xb)
r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x0, 0x8, 0x20, 0x5, 0x0, 0x6, 0x28, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe45c, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x4010, 0x40, 0x4, 0x4, 0x8, 0x8, 0x1ff, 0x0, 0x100, 0x0, 0x12}, 0x0, 0xa, r0, 0x9)
shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7e29d044, 0x500)
ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000040))
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:57:50 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
pwrite64(0xffffffffffffffff, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r1, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:57:50 executing program 4:
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r0, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r1, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:57:50 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:57:50 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x2be00)

03:57:50 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r0, 0x0, 0x0, 0x87ffffc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x440042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x183342, 0x144)
sendfile(r3, 0xffffffffffffffff, 0x0, 0xfffffdef)
sendfile(r3, r2, 0x0, 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000000)={0x0, r1})
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r5, 0xf, &(0x7f0000000340)=""/95)

03:57:50 executing program 5:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x8ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}, 0x11832}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r1 = shmget(0x0, 0x3000, 0x1, &(0x7f0000fed000/0x3000)=nil)
shmctl$SHM_LOCK(r1, 0xb)
r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x0, 0x8, 0x20, 0x5, 0x0, 0x6, 0x28, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe45c, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x4010, 0x40, 0x4, 0x4, 0x8, 0x8, 0x1ff, 0x0, 0x100, 0x0, 0x12}, 0x0, 0xa, r0, 0x9)
shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7e29d044, 0x500)
ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000040))
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:57:50 executing program 0:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:57:50 executing program 2:
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:57:50 executing program 0:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r3, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:57:50 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:57:50 executing program 5:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, 0x0, &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:57:50 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
fallocate(r0, 0x38, 0x72ad00000000000, 0x2)
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:57:50 executing program 2:
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:57:50 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x2c000)

03:57:50 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}, 0x800, 0x0, 0x0, 0x6}, 0x0, 0xa, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f00000004c0)={0x208000, &(0x7f0000000180), &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000200), {0x29}, &(0x7f00000003c0)=""/86, 0x56, &(0x7f0000000440)=""/88, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x5}, 0x58)
r2 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ff2000/0x1000)=nil)
shmctl$IPC_RMID(r2, 0x0)
perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x1, 0x2, 0x5, 0x1f, 0x0, 0xfff, 0x4, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x3d8, 0x3}, 0x0, 0x7, 0x9, 0x0, 0x2, 0x80, 0x45, 0x0, 0x320, 0x0, 0x4}, r1, 0x2, r0, 0x3)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r3, 0xf, &(0x7f0000000340)=""/95)
r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmctl$SHM_LOCK(r4, 0xb)
shmctl$IPC_RMID(r4, 0xc)
shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000000)=""/67)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:57:50 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:58:05 executing program 0:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
pwrite64(0xffffffffffffffff, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r1, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:58:05 executing program 5:
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:58:05 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
pwrite64(0xffffffffffffffff, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r1, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:58:05 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x34, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:58:05 executing program 2:
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:58:05 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x3}}, './file0\x00'})
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000100)={0x3, 0x80, 0xd2, 0x5, 0x40, 0xd9, 0x0, 0x20, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1000, 0x81, 0x7f, 0x8, 0xe, 0x10001, 0x6f0, 0x0, 0x300, 0x0, 0x4})
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:58:05 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x2ce00)

03:58:05 executing program 4:
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r0, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r1, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:58:06 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x2d000)

03:58:06 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x34, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:58:06 executing program 5:
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:58:06 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x5)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x4, 0x0, 0xdb, 0x3f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000001}, 0x18}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
mmap$perf(&(0x7f0000ff3000/0x3000)=nil, 0x3000, 0x3, 0x50, r1, 0x2)
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x400400, 0x0)
r4 = shmget(0x1, 0x3000, 0x0, &(0x7f0000ff3000/0x3000)=nil)
shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000100)=""/68)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x40)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:58:06 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x2de00)

03:58:06 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x34, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:58:21 executing program 5:
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:58:21 executing program 0:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="54e04c8446bda942c4f8901965a31ff1def26c41d40dc30e052ff6bd1014cb9f30269e74dfd2bcc6732aac8620e316a427e464ad9a901903d42a94a11acd18bce6c2a259ec3aa701bcb54722d9c9e8bfb43d085a1265f8e1be25806d37ed17f06055c830996067f243a1b59c92d50c286a916aac168c2f55bb849dc580a7dac1a159985b608c1f8e274d22127070d4c267bfb3e10863a3d4cf72e46b30981d9558273f4ae339c12c749227b0712ce31045f23bebcb31d40e8a7e6b85edca041aa0c9e78055f4e193ae0224ea09b157a322bb0e02c9a983d290682a436c74d3df5fabcc0914546a1da73a699d7c6d02601d42e62fa885c2a2f6bb566aca8f00ab")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
pwrite64(0xffffffffffffffff, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r1, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:58:21 executing program 4:
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r0, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r1, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:58:21 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:58:21 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000340)=""/95)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0}, 0x800)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)}, {&(0x7f0000000300)="0d133f344535340ddf5167b7f64b7b9f4a545cf82ca4816edf785706f88efcd45cca7c7bf4a152c355d8f03744653dfc5cde3e580925acef1615dac400728cec76365d420c4f7d4ce382bf13e751bb2c031592a6a20847c9ac82617466430020cec342eeae2b5f936e749d87bd3e9109d234a35679beffd6b8463cecf285f157a1bc4d09abcb38203588502540c9b0d8458ff8c0f1d4f82ea0c382792034def9e039e58660204bb2267d637ccaa28f01778c4edad2e55e28ee70e8a95a742f43b947e2bd8c14272a78f97907dc1969b4099bad7f7e", 0xd5}], 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="3a2a120996afecf444afb7820f296f8626c763a12967b7975ab8e9694e3513f954e82f0c791492ccf563ccca23eae2f15b983ffda0a006c26047c97208a768e843ce3bce4706bcfaf7dcdecb81ef814b556f318672aee03410e4dfc9c14abb621c833612b00762aaeaac08e9e0dc121806a6d3"], 0x80, 0x1}, 0x0)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000440)={{0x2, r3, 0x0, 0xffffffffffffffff, 0x0, 0x107, 0x9}, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="01f5193c2bde30da65307be8", @ANYRES32=r0, @ANYRES32=0xee01, @ANYRES32=<r5=>0xee00, @ANYBLOB="2e2f666957e51b0b900db00544981d6d6c653000"])
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={<r6=>0x0}, &(0x7f0000000200)=0xc)
shmctl$IPC_SET(r1, 0x1, &(0x7f00000003c0)={{0x1, r2, r4, 0x0, r5, 0x100, 0x7}, 0x1ff, 0x7, 0x8, 0x0, r6, 0x0, 0x400})
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0xda240, 0x0)

03:58:21 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x2e000)

03:58:21 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:58:21 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="54e04c8446bda942c4f8901965a31ff1def26c41d40dc30e052ff6bd1014cb9f30269e74dfd2bcc6732aac8620e316a427e464ad9a901903d42a94a11acd18bce6c2a259ec3aa701bcb54722d9c9e8bfb43d085a1265f8e1be25806d37ed17f06055c830996067f243a1b59c92d50c286a916aac168c2f55bb849dc580a7dac1a159985b608c1f8e274d22127070d4c267bfb3e10863a3d4cf72e46b30981d9558273f4ae339c12c749227b0712ce31045f23bebcb31d40e8a7e6b85edca041aa0c9e78055f4e193ae0224ea09b157a322bb0e02c9a983d290682a436c74d3df5fabcc0914546a1da73a699d7c6d02601d42e62fa885c2a2f6bb566aca8f00ab")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
pwrite64(0xffffffffffffffff, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r1, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:58:21 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x2ee00)

03:58:21 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmctl$IPC_RMID(r0, 0x0)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:58:21 executing program 5:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x34, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:58:21 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1fffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmctl$SHM_LOCK(r2, 0xb)
shmctl$IPC_RMID(r2, 0xc)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$IPC_RMID(r1, 0xc)
shmctl$IPC_RMID(r1, 0x0)
shmctl$SHM_LOCK(r1, 0xb)
r3 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)
write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x114)

03:58:21 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:58:21 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:58:21 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x2f000)

03:58:21 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)
shmget(0x1, 0x4000, 0x400, &(0x7f0000ff9000/0x4000)=nil)

03:58:21 executing program 5:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:58:33 executing program 0:
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x6, 0x0, 0x20, 0x0, 0x6, 0x89})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, <r0=>0x0, <r1=>0x0})
ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_addrs=@ax25={0x3, @null}})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000300))
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340))
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f00000004c0))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x30000004})
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x400000, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000004b80)={0x0, {{0x2, 0x4e23, @private=0xa010102}}, {{0x2, 0xfffe, @private=0x4}}}, 0x108)
r5 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000070280)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}], 0x5, "af2f1a9317bc6f"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000001640)={r1, 0x0, "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", "12151833e71fad9b0fc9dc715b5dbbbb293e0e368f4f4a4cfd51520ec7567e5a3cc283a0f7bf3d466b6d631ee7ed55f4b460fdfca467f6a9fed074930c71c974f90c9729522f070e5aaa99cb6e7737d1af7758d4fa84b53c486d178102fc4814d85f2bfc817538e8ddab5b98a1113b2a1fefbc61450693e4719a656eb56083ac8351111057162f535a9c64034f5db1c22cf6db8a70c4d974d54f092c4bf62d0d25b13a757bf690f41ca29e1c8a44f26b077d7e433a80437b69de18b0ab29bddad7a995052754ec8da92cf3c3a26e3272edfdf3ff44a8bcbf996e7332da52f5cd42f6e47a09b9c1a58cd2c453ed56e4841fe8a8d24de62d200cfbf5387f4582e6501936f1d17dcd9ec74be8baca69e14effd6ba6dafa5af8409643c35ec7c65956b03852106e0be8b83c1ff0a9975bcdac3a2f9ff7cbb65c057ca20d6a51fb7745f555905e0bb94827a5603cc79412e2a4f35173bc4c80861c561e6a47289e915a030895c8c9e825a6e2b50c10b0fdfe506fbb124c54091e75ca1366fe5f6c3a120d3cbb77ba6fd9638cdb104a0f126df1209819968e6b8574bb07f755c69580ab92c01a95a034ef3ee8ccdc9f308f16985994ae31f3aa84d9f7584dbad12c64fb973aa60f6cd675aba39eb1ef05b99bf789e52214d2b6e2c0c933798373b08697ae3a602d53a9cdcb92a43b3d1ac81da6a53cf47b17dc5d6fe15bb0c54d6941a392b5e445b0379700d14608f5baa65b08c15d13035f1f214085ec9841b7a975e21f284924940c4c8049ed98f73de3ba65d74b02e441eb17e0735735d22dd16558b3af61186d8ba1d273aff2ce6da48c8cd0b8431b558c05eaa0483aea25d3741406868ff5b7263172aa1d342012d441253af6618abd6eb7fabc139171889691ba78a9ca8e30287fc55c0c01e5c3aeb78021ed0701e7250fb66ac60be756a661feca933d3c870f51302e47ceeec943b08821200fc2d10409761050ed0c63b1dcac9b196cc59582286f9fb0d26ede93de63e76d4f0678ab2d9f51fa8a07f74071c1189aeaa387d7fc8c9719686f6e8fe345f556d16c7afaf722bc3568eaafeb9a78ba4c84a3e4272e2789c32455046429c98b76e98c49f7ee34f26c50cb819853c5a221af985227e9b40fb216bf34dec845c14f2c93a05005d3777d1b4e168ab7d9c41efb9e706c33e50cc8860b40662363e330c44f7b3f8c6191d737f7169c198e204fd55ae82f787a993be4d1784ab3717fbd617a40bf66c7c66d7bfbe66c3af15d9d06df96a626e41abcbd28dd4642dbea189196349c3dec77597663e14af4acd5b23b02bb3f5cb526978daffa494b65504e5f79cd0d1bb75e988ee77d6a9db380b6f8d9aaf6aaec2b1c719dfa52124c67bd55b0cea3f7f28306af31db18a5dba092d50976420eaa6a6234992a554192692231690f0d4ca7848e6f3f04ff3b86161fec71a16a29dfef98c49979c683f40d687e785e78f1157fd78e0581795fc0f421865662bfa381d3a45b66751d8fddbac446725f34f8b2e789458a7fbb667670317c803d6e1ba887b2ba260634315d06b89a137adddc2540bd8dc3749209b619d776848712406db79accf2ad61a4daeb3343347a097ffe67318dac8afe3cc2a9c8d1f5868d4fb0b55f64a9efa0d2123c608158caae86aa4b409edb0a42aef67b5b310f11e67eb19c7a17e4086dc7d56518dd809eb11a0cfd5181b3737e6d51ebd03406900e8fb5c482b8a1cbbe8fd8a9f241a64852e166ffbc9dfa248c1c9ae6323b95e93e79440e84ec72d08298c7b8a794cc3e75f8796076499b3f8c540c35966ec868604d7aef536d3872b5775ca625d2bd85aad04a30cc95285b56732f0d7a2e13fa86d890c642465c995fdd372e4337fef1804ef58c5dbc42b6f6ee98789577ce4a4bc18fcc4ff8b41a53016bcd41adf77b2480c7dde09d5a11a0acfba99b6c7e3a98f555e8651292379e5b853d0353b08c754732da18665e8af137470c8adba55c53cd7fb07df0b27b5343fe11c65c72458c60c72dc0ad7b34977a962137ff01c50e939362c15bef413da682374faaac3eae580088d4713e7011fbf8153a73b5b0073ba348e2330a0e36efed0f4d5a74c606d65623408eaf1df6bfed75b0d1d84c6f470c23bce56b307767f6b387c87022272ae09d74e8cdbdd52f7e89e3aa5ffb8b2b1f00fe1643e48af1a44a85003bd584179c036e3aea931068f8039eff8db42096fb66a26a8f8a7d92dadc632aecb7f2795b97758411753f2b8dd9f35cae41002ab967b0e6d6a7f88947caba0e86db96e3561e3b8efda345d9177bb9c34f51a5046050a28a0720a594ba542813bae73bbe653d666a941b876f4fb6b369b67020071ae7258edb7c1acee21b530d2ada5506a508f608606de1c9b42f8e5699e05134e879e7e6a3bf65f4815ecb4b69df9123d450e094c0714ae3c069bdc431be8f1c0fab55d71ea014fcd73b687eedcf2005a2e4c69ebdf83b0999b5e142e10215b78ba587ea7e4fe008fc4df7099c86d319824cb287efaddf6dd351e486da5690d8c76ab568f13b85aa9487577449110598287082a199c241dcdd848e9b903a6539ec2ecc1ff69922e912fa454537e0a59796a7f49c8f1b9718890d17f9142b213687e083f854a41e06e4257ecf8b1439798b2fb15c16630c04bede397276e71911d2a97b73f1a32aa28f3d5e7748fa21ef353ce5dae56d93d4a224723c1e31bfcc84b773c2f3f3f8ce8d82eeb26b36cf158368937835c25aa3478783115776abd4d2f4f1ba12c37f4d8705dd85c1ce612912d9074208545c519e2cbb397602c4e70c496382dc6eccd020c3bd7e40a705b1e62801a4520fd76c0962070ddb319cafb620d5890a013c391b500263887d62dce54c53032f05ca863a243cf8ce9b1a667c53a8a1c91d5461a512fc90c588ae91619bdbe3d913377dcfdefb1d24405ca8d11aa38cbfd0a23eec2aeef361a700bb5d2cad6b2dfd59005ec3cc2d91a727a1bb438d6fccf6739dcc00c5981b3b4611d3fcd941b639c38c80c7dfdebb163f588a7945f5309154b05f43de6557fafea51540d45607021c22b62e3cec2b79912d55d797755552f06eb1055f6ef400bb1b53fa3b8548332f769880ef8cf36b51788d345f7a103e5b927df19609fcfe69f1e30e73ff5d68ac86c930d91cd776c2d189b5631e62adf916a5c6307610a1b13a2472a4079e53ce1c96e43d73ee70ae10a90ba6ed106cdec9775c7f31e8204831b8bc2945f6ebdaf068a9b6ac43e9a25b46cd3306b2850a5bd4f56fa6d85fbeeec76cf86913140114cb52e73e5f4494be3cb762ea83fe000ea9284de8ec5455ff9d97a96184eada4be4cd6dc005775e9c60e5171bbb0e06454e45dd58a474b0a9fe7ddb7d1dac6446ffb087afeebc140d7c8955ca8d3bd46813e84c18efb0ae67d90d2aefb7827e3234ddef7eafbd24eac3e150daff39fb3f1d0b7364ccd11127c55a642680ec7b797bc8fe638a154732fbd7f29029564a039c07406aa13cd4eca83e8065ed1c431a70a7740cf106003c9b6e7265a2881b2bc427a812170955f81e7f80488bf6829b3b27f24ea7d06e35e19845a7fb97125b9f759698baad9631893c73ecbf7b101640fa7dc6a884051b26aa664c09663951f6362f786ab502b5245e1f4b5b1ed6a878802ed5b99d46cb282aefc4d7dff431e888d137d554f67ad64e6bc4ea6b5a1970b026192a78f40c106320a372b123f59bf720f63d784433e8b3e83621858430698b4e9be3beeb2cfda71f949a720e1969ec514d289d4d75a9487d3eddb4b994371ef570694c697f728c99dab069b15a5d23d14115b0688207715c7ed8483a49f2d929051be482dc7b52ca312d048a478a415119aed0371b3fd529a8c9fce2dacb7bd60b80d0955f55fe33c10741cc926e5f1ccbf7ffbb257d7fc48977ceaac159f103d39ba826bbdfb5e4e5ab7c6533a09a86e64f62ebc2302d2d8deb2b0dbadc8f0299f40c261375d8b6941b0b1d8e17d7046ac50275f8299aa9c3b4b5fcf292cf5306ef2d969c7a876c71f944258c6ea9064f877ad77b4ddc328e1895ec8b1625fcbfa883759f868d2b8c31b924c165efe20e3962aaacc849a9179f4db18c9f429364dfefc38b011bba9acb3bd16935c93226fba2ada299e60032b8ab86d96c511aa091cd5b8a3d1c33013cedc362cc74f7d1c4bf3bf7171bfe2eb59aa59617caf3e6b8744cd9672e9d178cde8d889fc031cd79dc8e714a46dfd7dd915b79f811f14fc5b2eda3a4959fb6e4ae54f6b31784c5bc2f486e6c70ddfb43757401704dcdbc892cda8f06ce5ac3c362fdc7cccd65c0a4bcdffc0643dc75c216f5e10caefe110b8695e7aa32cd56e4352ea9c22ce9a3c6d8f8ce42064e93b05e258e258be3f570c54f0156ac004c5bcfe1b12a4ae16a004525b50bfadfe8787bef60a450e7be1ff5a0c90383843e253ae18c00bcbea76d3eb50edc0a69daf741df75cbe3b69a823e8dd1572e95b27dd8afa7c2cecafe29e294f7e9105715a991d449e964aefbc4427dd5dd89aae812acdd7f523d88f005883831d898d11d6c86f73412e28e125ac8cb5c6a37cf60efd980419d38b1215f0ca8259d4f54ce9d111ee713ee6c258c55098c1869eb7a49ebaab566596f29ed132896fc21d47d6b9e428c15a887fe02259ebaeb065b9e54f4cfd125518ee36cf1bed1f0634d230c0dbce0a0f5d281b527894b5ec075097a5c5e80226db89ce132a1d5ccd3db8753c70fea15a8286a846c384ecc85c755d58cf083ed3257ebe52bfabc812b35780af6813bb22e2e8d0226f1056af0d07b64edbf8ffb2b4737110bc7e0e631017f5922f5ce1b1346b2b393522ae7829e84e604cfe75cc04e7bad0826b76c00f24a687acb427715c5ba2bb07f1f8f45924069df2e42f2ffb426669bbdbba20007c38e0f37f3955efd31838b27bebf042502d691586d2404f0c784f57583a6134f5ebe91662f9420ad91111297b94147ea100a6e7a44b0460557d839f7937228ac9415d0b517068109f0e738ad65a32f23015b3f010f011d8a4cbd4e2cb5c6e92511290a9ae7ac19384757b9cb26009d7ac9f199865cb0e2c34c5e43a8d3822ea8529ac5c6569223bd8e5fdee6466b5c8ab035b8cdb301aa6de499ccca94cf9a710acb599e70c1bafed118cfab018adbeef8eb08ce5e0917fed339e21307494766a2826acebc2ef93c42bdb6f36213a397f5a477dcb7faf4b71d9bac61a43126265ee31b92f57340c5bf40ec198d537c5d4e0a4a2bf58d587fd60f51658b0a5f3e0acc494fc2a3eaadc41c1754b14f364e3d0e6f9b38a053f66a60388a03b928df1c54a6171440eaaf82f602d6dcb23bc5cd275e3928ee6f2ec773b61a70c9986d93b1deb863b95f31c99a460fd51d1d10bf30f350175"})
ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, &(0x7f0000000040)={0x346, 0x7, 0x1, 0x0, 0x2, [0x200, 0x4, 0x7f, 0x1]})
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:58:33 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:58:33 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}, 0x11000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
pkey_mprotect(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x200000d, 0xffffffffffffffff)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xff, 0x2, 0x5, 0x80, 0x0, 0xff, 0x8, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xd8e2, 0x377}, 0x0, 0x2, 0x9, 0x1, 0x1, 0x5ea6, 0x8001, 0x0, 0x1b, 0x0, 0x7ff}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x9)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:58:33 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r3, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:58:33 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x2fe00)

03:58:33 executing program 5:
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r0, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r1, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:58:33 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:58:33 executing program 4:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, 0x0, 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:58:34 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:58:34 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100)
mmap$perf(&(0x7f0000ff2000/0x2000)=nil, 0x2000, 0x1000003, 0x2030, r1, 0xfbb)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:58:34 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x30000)

03:58:34 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:58:34 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3f, 0x1, 0x87, 0xfa, 0x0, 0x9, 0x100, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0xa}, 0x4040, 0x2, 0x200, 0xd, 0x9, 0x6, 0x8, 0x0, 0x40, 0x0, 0x2}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x0)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffa000/0x3000)=nil)
shmat(r1, &(0x7f0000ff3000/0x1000)=nil, 0x1000)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:58:34 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x10, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:58:46 executing program 4:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, 0x0, 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:58:46 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:58:46 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:58:46 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r3, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:58:46 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:58:46 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x30e00)

03:58:46 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x10, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:58:46 executing program 5:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
pwrite64(0xffffffffffffffff, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r1, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:58:46 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
r1 = socket$inet6(0xa, 0x80000, 0x2)
r2 = dup2(r0, r1)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x14100, 0xd73, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x10000000000000, r2, 0xb)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r3, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)
r4 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ff0000/0x2000)=nil)
shmctl$IPC_RMID(r4, 0x0)
shmget(0x1, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil)

03:58:46 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:58:46 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x31000)

03:58:47 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$IPC_RMID(r1, 0xc)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
r2 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ff8000/0x2000)=nil)
shmctl$IPC_RMID(r2, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
r3 = shmget(0x1, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil)
shmctl$IPC_RMID(r3, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:58:47 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:58:47 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x31e00)

03:58:47 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x10, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:58:47 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(r0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
syz_io_uring_setup(0x4d84, &(0x7f0000000000)={0x0, 0x43df, 0x4, 0x1, 0x3aa, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x7f, 0x4, 0xa0, 0xc9, 0x0, 0x1000, 0x40841, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_bp={&(0x7f0000000000), 0x6}, 0x400, 0x4, 0x16, 0x8, 0x3, 0x9, 0x1ff, 0x0, 0x81, 0x0, 0x3ff}, 0x0, 0x3, r1, 0x8)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:59:01 executing program 5:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
pwrite64(0xffffffffffffffff, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r1, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:59:01 executing program 4:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, 0x0, 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:59:01 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x32000)

03:59:01 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:59:01 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:59:01 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)
perf_event_open$cgroup(&(0x7f0000000100)={0x4, 0x80, 0x3, 0x40, 0x9, 0x5, 0x0, 0x10001, 0x10, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xffffea0a, 0x0, @perf_bp={&(0x7f0000000000), 0x83ce0c0a4abec03a}, 0x1000, 0x1, 0x8001, 0x9, 0x3, 0x8001, 0x3, 0x0, 0x7, 0x0, 0x100}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0xe)

03:59:01 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="54e04c8446bda942c4f8901965a31ff1def26c41d40dc30e052ff6bd1014cb9f30269e74dfd2bcc6732aac8620e316a427e464ad9a901903d42a94a11acd18bce6c2a259ec3aa701bcb54722d9c9e8bfb43d085a1265f8e1be25806d37ed17f06055c830996067f243a1b59c92d50c286a916aac168c2f55bb849dc580a7dac1a159985b608c1f8e274d22127070d4c267bfb3e10863a3d4cf72e46b30981d9558273f4ae339c12c749227b0712ce31045f23bebcb31d40e8a7e6b85edca041aa0c9e78055f4e193ae0224ea09b157a322bb0e02c9a983d290682a436c74d3df5fabcc0914546a1da73a699d7c6d02601d42e62fa885c2a2f6bb566aca8f00ab")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r3, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:59:01 executing program 0:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_io_uring_setup(0x6634, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x40)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0)
openat(r2, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x5, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f000005ea80)={<r3=>0x0, 0x0, "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", "e523b5759d667166727f4f5f231f940828af27752c11d6c0733bc42738cfb8efd4647d34eb81c4acf58bfc4d9592f3768d6ad775d25f2e31ea2968acc0d14759bbe747973fd5f4e305f3faa153584ba6b339a7ed14a3a44cc6711db569f15be374cc3424cde2b0f793ff5be7c1ffad0e100bf1d99a102b587d42f97bb88b5b4d99ce0054069a71c75aef2f769dd81e2d028a03458912ccb232a56d0655903a1a146e00eb88b181f1d13124e0a2835bd2a20b38c9f420b437f4261e3c8a7ba80bd00e77c560d991ee851a02246f4e5d273a8022dd7a284ac7d01867d05a72b304d3a8ae0654955ee8876644ad0d2ea16a7677d7722efabf28581bdb7ea1ab0df397c37e8f1db3f030fcf063436ef1eb54fb685675e019be73c092d9df047965f621f5458af763ce19ea22fa5c6b2cc7d098e2a222923a1e266ba893e70d7fb924b130ee515cb3a177c3c87e13b46969c0703a4b0acca5b26dd62cb423e667cafc4bb991aca699a8927801f595544e14ce88d07bfdb0dd7493705709c245af957da4648f11989d3c65232477a3c4ecde33aa13ec7c9c94aa897ffe76144f5d2bca02d7d6e0fd2419a5c811c466a7967ca73a6f50f239c40657e10366d0a253cf878b53e59610acb23455df96dd90be6546ce625389eb5e42f3148886110645205bac61e9d0a5a1e3ea825869f07906cfed5157707787d0daf2ac8e744c26d11463dc6bb328d4b31abb94125b8a1e322e9061d6f6dd244dbe1c88cfde6953d1d808edb8dfc804cf8a260e91b03b0b6fd12b75bf84d7dec4f96e6b07454b132172d3eee7f59e2d626b47a18b22efa250981a47b110744b204c2f5186eff87d727b4ee326afe9703d0b24ec268bd7427a6ff3ab732fbdbd7d5a1cce3d282e640c3ee9330605677f74896a1f6ca59f55382522e77bd96170c6cf268e8bd138740c459a1af2aa2c529077af7d79a0c96c9a03de03aac4ea84a270df17e6c62e580279f1746f941ed5eabb9a563deb28cf4f62df927c2d7fa73c0430774e5b4e69ec0cff15ceb65a235d259ce244ff23e9247222e6afa673e27254168fef5ebf81b421e35c5142f92808c2ab24d16f16d081a3b66f1535a84988ea0ee1b24fe606c63eff9ed99c57b7b53b44368af34eb8b1f913890f965af04e975a3f76620aadbf74a4d424c5d86c3dad80d4b0b55279b58be94bc65a2399ed8bc3637d09c39bb0432fddc6412d273b50481fb5c95dea68c676b73a9b90032eb1ccb7c5058f51a87191e9f0fd27218b97443ec99a935b2cdcd6cbd52897a19d9bf512b354b21e0e5cd753d6cd3615123e93ee0d9f85a1decdb6d466fd76d104fd4edb329d863137964f9894566b832c35e9e00d7b1b7c6cd102c1ef6c44fc4a7e2cf25f0030d765cc0643228ec51de3a22855eef2203a481fb612024a53eecee7a59a59584e8015ee75fabc90a497fb171d2754560555fe5b5b53ac447bbd2f5fa4af8ba1126a9f092e0954ab4554fbbc3fee7790dfa46b0d0c61f26387b5f9a950ccbc9bf993d80ca57473e03cfcd43819b2a966db117dacc5fb459b4ca9472f590f48fddb238d186854feef2ed6b3a820d5bf0728f6c941a506d3a3657be557d817fe1f1d2ec371b32f97029f608d55bf5e670011ff22d3e6506dc8dceb1af9034c8314adb5cd00cbbec07456fa0ce53d8034a2f602b728a489644a185662419019dd061cf81c2cb0dc84506eb3dc29ea746709e001a02b42c2c85214e9dd480326093bdf27ba550408c756ecb986b49d9897ff5569fd88b4811c84ff8ced0931b32726672c80e23aa9bc2e9ce4667e641e3b23c5e884f3f11fbea7144608db2f03ed82af08cfefd0cae7cb196579c9b6e29bb37161cc7e9cab36d45281592c338e49c6facbb16a23da184c87e5db958c94cce0851e05fbf3551ae6c2ae51eac7091168e78f336108163d3ec4556bf3542a7f5fcd5dc743887d89a638b7c1c289d324a50dee34c9e07fa22a5a1bb6298e630b4cd7ce28d6fac3c5f1f3eef7e89536c072aed073c7a70a16453419989bcdb301d68d6241b64b9219e30e4386cf48ba89f83da746e7066aca927254a6ab6146e33bf084bf93e4eb7715539d64a9e0b07af65b8873321432c0ef739f802287cdc09d960c049121da315ff789547bc750ed491d63c6d4dc8a4f529a11cb80f83e53adc845f936b6a1a633ffa1e1b45a96bcc154fc7fd48c86752a2a417bf1bb3c7f09fe1bd9d1b1bf372cc764e3a5bc15e2cc8ad72ed2c2be3afbf1362381812281690042eb687d25246b3b56cc8030e5ec1a619a0c7bf5b0e5be7ebec66e121c5f17bde5eb8eb4b55bb9fcf3b510a2dfcc92c96c66f54ddd29cffa337301b00063034979fc402ad2e22ae054c406f64bff04e0b0dbcd4a6da402eec827109b3e9c9b842c7d38c2eda663ee7c49f1ab16b0dcfa1a7baa0b498148bac2eba6a507c1b1ef07e8ebedda0e300d57ac7fc36065006ab4f673c27bee1775e1f3240748b18bf57e5c598281fb9dda8e99836f0be16e52640cd050e14f8759046e91fbfbf3e34cd58c6a5d40d567a9fc535b9ad6446fa5e572aa133bf114e7dccacc29c1a09dc3f527c19755d88913088a7f18c4785f30b971deda781523e54e18813e53153735885fe354df423988de3f5435a848e895812425113a53c14fa1d4319f6b09b203e58efe9ab457fa058799f572009e0f1f8dd5bb599c81741e75bd6bf23e933ef396eb02a183b17c515460a78ff9c65dcffbe31f1a431f6a10bbe9509bc32b8522e6acce23655466b03fb3ef19aca7842bb78d854f002c6ab95a6f9d1c2b757d39c15e032895efb9ff7b847579c9adcfa023d0c86a9005694cc4813ae3ceac3ccf928af036886ce2066cca885ac7ba5f5b6945046499c630b77229673770e16fd1941b576269c55dcbe0d4b64b84f4318b93bc93d528d247bb4fa8b5a17d1235f4647856958a5045b14c85ab7ca3b8fc2636273cf457444c29932b114cd9620f6b354b92b80bd70dad3ac9dfd22b9d329bfb5c3b6da332dc4b535f38938855102e8eb8dbc6b76d536231562ec85b2d5eae83b91b8410de823c80785532f1099d2af95e867b91c849d9021b7981d40a1e152269adc0db7fa3b275d6e1c91162c7a0ba6360453faf5bc0dd3b193688de8c1f2f61a17f0924d32577adc50b79c3646a1745413baab9285e6e6a127de9bd3feaa0b7abe15164eaed727d3476ddcdf7489c64fb9b4dbbe5bd11cb7885e3d38dedaa60d55eda8a5aaa2d7c65c7f7633e8bd9a208f10bfcb5ac0063d57ee84ddc8a4c3f26a1e4b17f20b78679be0d36e339737ea96de459e09f68cf6b15077d7ceaead73ad184a2c526a4708df32d2eae7b8390aabdf0f51edac3179a1c2e48b57378069b74089331121bcbc4dbc60fea072766ba7c430bdbd99eaff90fd8f8fbf6a138cb16b7cc542f2dfe7fef69f9f153d64551705d9af28bc6ff911aaa513a569cd739ff90b4ae97f1845acc960b3fa67405bd8c03150882f2ca0b8a12faf849c4df749a9900fefc940eda85403ae172ad2dfc56d604295abf6c20c5a988e3f23fd29fdebd1fd89e1bda5c501127b1d5d5a2592f93cdb63f4d1a0d2e3d3b9cf22cbc7e3fbbb7cba0a762663bb168f6739979833bb3413b9a5d1d95116e7c8ef5195ff2081e75b50f1c9e8000f365879ee95067bb909db1fba42c00436bddd606093ce93a724ea5a420a2b23ac2434c0e74db0ec33e66a931f02dcb54ae8d8a17c087f5438420ac90042b4e0bfe9d19498ed0690539655f11e7d21749cff79a7dc3bb3ce24f8ac72b81535176210eec606ef7ce5666fd7ea0b5d87a22a76520287b123aa9b4aac386b6d74c6b7cb9bd70a12f9045d79e62e860d157856ac9a73b02b07361bfdf605be12a5e94e0232887019fa62c08ec633053c3d736b29ee9652cc9b20c355940aad3149e12cf46b2dc50c64d30a706f8dbba955b315a2f3cd33e826334af367f2c152ee31e9105db56558c02beee1678a8dbc098ef193e8725d53bf88d608667b24722280ed5d2e6a53b5a9a9cc146d3247a2e1c69be325027569431b9207b8a2478d9a2dd106225736b05d836f5580cb6709928950d4f31f76f4a39e94d9910d6ae56f4c2b8ed1963b9c879004039ccacf4daa93659da286589b4714db6b98616986191257fb3300efb6d28203b302a2ffaec6858f49ef8d738a9c952f92c23221142cca85055e0a3b826d02a9ed284879d51f47bb3312d35763da398d809b17db425ad1d9554d1cfa2bd2db66c9ab8fe0adb3a368cdc19cabfcdb65ef85d1c902ed2b3402fa3f2c0ab7d390fa627e406aa642f4963099d4fb389c6dee5559eea5f1462f23d9ad5b1d9fc0f664ab7b971f620b9f618894ea036c9279bbfed130db7b645d829fbb03553d191ce9189e0261f67e8d297b8c42678da3858bc99e5effed77f2d916f0825caafc4c586d7bad73e8608e019ac545130ea4593eec0f8b318d7d4d9fd04c2ca70f286ec2b89336df34368623f46e332c2acd09776f549e94b75da9c9ce07911b6f07001ea68b52a4298a4fc0256ba3a4be5a79b6ee1d54bd2ad262b9b41ad6db2476c08b9a25d1450dc977b36db6da12bae69554a4a6389b2ec5df219cc7bbb05df42ddfe371a9850cc6f7d142fd1948adea07c4134c539525b515b45793c87c28e231c5b76fdd169a9f45aa64fcb6dd3e526edb96aae9bdef6cfab0220793f7e44ce9d7d473effbcb699ccbbe4d6d8624c5dcf46aa139b9c54b49a194110503fdcf53087221e66d08eecf8771361dcfe05ddc728d133b33bbd79b7194a9515edc60ae05eb5749f845a08da5ccd4247a82ee473fc0603cf0622a499e5f402aade32a833aa6769d474b1c6ee17852a97066880e672923b7b901c523e3525ec1f8d5d4992de4a19c31767de98cfec08cfa6e8a9907d758c2e04e576b45f28ca2540231c9cf37b9745e4fa42347acd381cb8ec30baa2c9780b6b449f4f694f3f276aa4aeaa8e17f758635b23b6cd41320470772cf996844db3f9e1f1ee30453ecd02b2fedcac6b63bf26bbb446fa3d5074318be11c497f990f14365245b087f38494a310c4c03ef14cedd27182dd2f56f07c21dca7a62ec5f32469d32f208cb378958f03ca69ffa91e76d68b4176320bd01df63aee8da3b34d3983cf1c9b69d30c59371583ef0cd7dd186b07ddc1b699499fb3a5ef35fda0d4b3e74c4574327f1c43b8952e2bb578f9f0c018bd223395387306cd6721bd74208ab98af0e9c8ba7d699837116f53b95ae379eeeaf6fa4c65f9c6b5052bc339189b97956f08d812d37f6aad3067374ccab40cc68f61b47afa0f85b70a5dec2eaf1cb9d340383d98a90f3ed95b43d5376c4fd3a6de964c8201d33b3c259fd80043cd3ef8bf974652e8f5e07917"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000180)=ANY=[@ANYRES64=<r4=>0x0, @ANYBLOB="d82d00000000000000000000000000000200000000000000326d00000000000036450001000000000300000000000000000000800000400074adffff09000000400000000000000000800000000000008ba4000000000000030000000a00000010000000000000000000e1ffffffffffffff000000000000e0aa3011d0fad5ee327fac136e753425e73a4dd36b1fa465c878d0ed9cca5609de9d676f956cc51c8a646e0de29bf0a15f4da6d1f6912dbb16e905087ac5eb5297087016c2b78506587600"/208])
r5 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000300)={<r6=>0x0, ""/256, 0x0, <r7=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000000500)={r7, r6, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005fb00)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {r4, r7}], 0x1, "89fe405ff4be00"})
memfd_create(0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, 0x0, 0x100000)

03:59:01 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
syz_io_uring_setup(0x4d84, &(0x7f0000000000)={0x0, 0x43df, 0x4, 0x1, 0x3aa, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0, {0x401}}, './file0\x00'})
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000000)='\x00', 0x0, r2)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r3, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:59:01 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:59:01 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r1}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r1}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:59:01 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x32e00)

03:59:02 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r1}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r1}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:59:02 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff6000/0x3000)=nil, 0x4000)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x7, 0x1010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
syz_io_uring_setup(0x4d84, &(0x7f0000000000)={0x0, 0x43df, 0x4, 0x1, 0x3aa, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
ioctl$SNAPSHOT_FREE(r1, 0x3305)

03:59:02 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:59:02 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x33000)

03:59:15 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x33e00)

03:59:15 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
r2 = shmget$private(0x0, 0x400000, 0x1, &(0x7f0000c00000/0x400000)=nil)
shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
fallocate(r0, 0x48, 0x3, 0x11b)
shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95)
ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f00000003c0)={{r1}, "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"})
r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmctl$SHM_LOCK(r3, 0xb)
shmctl$IPC_RMID(r3, 0xc)
shmat(r3, &(0x7f0000ee9000/0x3000)=nil, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:59:15 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r1}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r1}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:59:15 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:59:15 executing program 0:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(r0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
syz_io_uring_setup(0x4d84, &(0x7f0000000000)={0x0, 0x43df, 0x4, 0x1, 0x3aa, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x7f, 0x4, 0xa0, 0xc9, 0x0, 0x1000, 0x40841, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_bp={&(0x7f0000000000), 0x6}, 0x400, 0x4, 0x16, 0x8, 0x3, 0x9, 0x1ff, 0x0, 0x81, 0x0, 0x3ff}, 0x0, 0x3, r1, 0x8)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:59:15 executing program 4:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x0, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:59:15 executing program 5:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
pwrite64(0xffffffffffffffff, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r1, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:59:15 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="54e04c8446bda942c4f8901965a31ff1def26c41d40dc30e052ff6bd1014cb9f30269e74dfd2bcc6732aac8620e316a427e464ad9a901903d42a94a11acd18bce6c2a259ec3aa701bcb54722d9c9e8bfb43d085a1265f8e1be25806d37ed17f06055c830996067f243a1b59c92d50c286a916aac168c2f55bb849dc580a7dac1a159985b608c1f8e274d22127070d4c267bfb3e10863a3d4cf72e46b30981d9558273f4ae339c12c749227b0712ce31045f23bebcb31d40e8a7e6b85edca041aa0c9e78055f4e193ae0224ea09b157a322bb0e02c9a983d290682a436c74d3df5fabcc0914546a1da73a699d7c6d02601d42e62fa885c2a2f6bb566aca8f00ab")
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r3, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:59:16 executing program 0:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(r0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
syz_io_uring_setup(0x4d84, &(0x7f0000000000)={0x0, 0x43df, 0x4, 0x1, 0x3aa, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x7f, 0x4, 0xa0, 0xc9, 0x0, 0x1000, 0x40841, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_bp={&(0x7f0000000000), 0x6}, 0x400, 0x4, 0x16, 0x8, 0x3, 0x9, 0x1ff, 0x0, 0x81, 0x0, 0x3ff}, 0x0, 0x3, r1, 0x8)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:59:16 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x1, @perf_config_ext, 0x10, 0xfffffffffffffffe, 0x800, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x492102, 0x0)
mmap$perf(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r0, 0xfff)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffe000/0x1000)=nil)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x15, 0x40, 0x5, 0x40, 0x0, 0x7fff, 0x80001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_bp={&(0x7f0000000040), 0x3}, 0x8101, 0xfffffffffffffff8, 0x0, 0x8, 0xf070, 0x3, 0x7, 0x0, 0x3, 0x0, 0x6}, 0xffffffffffffffff, 0x0, r0, 0x1)
shmctl$IPC_RMID(r2, 0x0)
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
r3 = shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ffc000/0x1000)=nil)
shmctl$SHM_LOCK(r3, 0xb)
shmctl$IPC_RMID(r3, 0xc)
shmctl$IPC_RMID(r3, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)
shmctl$IPC_RMID(r3, 0x0)

03:59:16 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, 0x0, 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:59:16 executing program 0:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(r0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
syz_io_uring_setup(0x4d84, &(0x7f0000000000)={0x0, 0x43df, 0x4, 0x1, 0x3aa, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x7f, 0x4, 0xa0, 0xc9, 0x0, 0x1000, 0x40841, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_bp={&(0x7f0000000000), 0x6}, 0x400, 0x4, 0x16, 0x8, 0x3, 0x9, 0x1ff, 0x0, 0x81, 0x0, 0x3ff}, 0x0, 0x3, r1, 0x8)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:59:16 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000340)=""/95)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x7, 0x7f, 0x8, 0x2e7, 0x7, 0x6}, {0xa1, 0x5, 0x9, 0x800, 0xfffffffffffffa1a, 0xfffffffffffffffc}], ['\x00']})
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)

03:59:16 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x34000)

03:59:16 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:59:16 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r1}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r1}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:59:16 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, 0x0, 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:59:16 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x7000)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5372, 0x6}, 0x212, 0x0, 0xfffffff7, 0x0, 0x0, 0x20000003, 0x200, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0x0, &(0x7f0000ff7000/0x1000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
r2 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x8, 0x4, 0x4, 0x7f, 0x0, 0x4, 0xc0040, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0x4, 0x7}, 0x5000, 0x12, 0x8538, 0x5, 0x6d10ec56, 0x1, 0x6, 0x0, 0x1, 0x0, 0x14}, 0xffffffffffffffff, 0x8, r0, 0x3)
prlimit64(0x0, 0x0, &(0x7f0000000000), 0x0)
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x95, 0x5e6}, 0xb78, 0xfffffffffffffffc, 0x3, 0x81, 0xffffffffffffffff, 0x0, 0x4})
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x6)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
r3 = syz_io_uring_setup(0x7028, &(0x7f00000005c0)={0x0, 0x0, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500))
io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x3, &(0x7f0000000040)={0x100, 0x3f00, 0x0}, 0x0)
shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ff9000/0x1000)=nil)
shmctl$IPC_RMID(r1, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840))
openat$snapshot(0xffffffffffffff9c, 0x0, 0x220081, 0x0)

03:59:16 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:59:16 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}, 0x80a6, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x5, 0xe, 0x0, 0xab, 0x0, 0x7ff, 0x90a0, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0x80000000, 0xa474}, 0x0, 0x9, 0x1, 0x6, 0x3, 0x1, 0x9, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x10, 0xffffffffffffffff, 0xb)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:59:16 executing program 0:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x10, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:59:30 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)
r1 = syz_io_uring_setup(0xb9b, &(0x7f0000000440), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500))
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x3, &(0x7f0000000580)={0x0, 0x3f00, 0x0}, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000000))

03:59:30 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x34e00)

03:59:30 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r3, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:59:30 executing program 4:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x0, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:59:30 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, 0x0, 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:59:30 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400)}, 0x300, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x7002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x101, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab', 0x0, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f00000001c0)={0x3})
getdents64(r1, &(0x7f0000000240)=""/217, 0xd9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa9}}, 0x14)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x100}, 0x20000000)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000000200))
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
copy_file_range(r5, 0x0, r3, &(0x7f0000000340)=0x3, 0x2, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000440))

03:59:30 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:59:30 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, 0x0, 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:59:30 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="200000001d0001000000d8c93100045f979b5b15ca453f000000fd0000000000"], 0x20}], 0x1}, 0x0)

03:59:30 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x400000000000003}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0x0, &(0x7f0000ff0000/0x3000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
r1 = getpid()
prlimit64(r1, 0x0, &(0x7f0000000000), 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
prlimit64(0x0, 0x0, &(0x7f0000000000), 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0xbc, 0x18000)
perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x75, 0x1, 0x8d, 0x7, 0x0, 0x0, 0x90201, 0x5, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x1047, 0xe, 0x9, 0x3, 0x7, 0x0, 0x1, 0x0, 0x2d59ceb9, 0x0, 0x100000001}, 0x0, 0x6, r3, 0x9)
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
syz_io_uring_setup(0x4d84, &(0x7f0000000000)={0x0, 0x43df, 0x4, 0x1, 0x3aa, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x7, 0x0, 0x4, 0x0, 0xa31, 0x40000, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x1541c, 0x6cfc, 0xfffffffd, 0x9, 0x9, 0x2, 0x800, 0x0, 0x0, 0x0, 0x20}, r1, 0xc, r2, 0x8)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:59:48 executing program 0:
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000))
socket$packet(0x11, 0x3, 0x300)
syz_emit_ethernet(0xc2, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @rand_addr=0x64010100, {[@rr={0x7, 0x3}]}}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "9a9d3ea024eda0bce77faf76c7e49bb391e48d9cbeef7a253704a4691ee7e6fe", "0c184a37a61703d8175d34d07ec567437534446cfafdba5a2b3b52a27c3196465df7adb5f93d80c8ccf8bfe0f4da7657", "57948902d76044d579f5ac2653f518a9beb9f8f9ddc38c537038d734", {"b776339e7af87f71d2bc85b7193f727a", "bd7cb8937b109bfc000000000000c14c"}}}}}}}, 0x0)
r0 = getpgid(0x0)
perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x9, 0xb5, 0x7, 0xff, 0x0, 0x73, 0x8002, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1c83, 0x5, @perf_config_ext={0x4, 0xa4}, 0x6000, 0x2, 0x19980, 0x1, 0x24, 0x4, 0x6, 0x0, 0xa6, 0x0, 0x9}, r0, 0x9, 0xffffffffffffffff, 0x8)

03:59:48 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x0)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:59:48 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:59:48 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x35000)

03:59:48 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
syz_io_uring_setup(0x4d84, &(0x7f0000000000)={0x0, 0x43df, 0x4, 0x1, 0x3aa, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="07000000702fc2dbdf25040000002c00018005000200520000000800060004000000060001000a000000060001000a000000060001000000000000000200030000000800020005000000"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4008000)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000000)=""/84)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:59:48 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r3, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:59:48 executing program 4:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x0, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:59:48 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400)}, 0x300, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x7002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x101, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab', 0x0, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f00000001c0)={0x3})
getdents64(r1, &(0x7f0000000240)=""/217, 0xd9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa9}}, 0x14)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x100}, 0x20000000)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000000200))
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
copy_file_range(r5, 0x0, r3, &(0x7f0000000340)=0x3, 0x2, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000440))

03:59:48 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001", 0x4d, 0x400}], 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=0x0])

03:59:48 executing program 0:
ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x80, 0x0, 0x0, 0x50024, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff, 0xdbb}, 0x0, 0x0, 0xf45, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_DUMPABLE(0x4, 0x2)
prctl$PR_SET_DUMPABLE(0x4, 0x0)
prctl$PR_SET_DUMPABLE(0x4, 0x2)
keyctl$clear(0x7, 0xfffffffffffffffa)
getpriority(0x2, 0x0)
prctl$PR_SET_DUMPABLE(0x4, 0x3)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x7, 0x0, 0xff, 0x0, 0x8001, 0x4040, 0x11, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0xf}, 0x1, 0xfffffffffffffff9, 0x2, 0x3, 0x1f, 0x34, 0x6, 0x0, 0xfb98, 0x0, 0x5}, 0x0, 0x3, r0, 0x2)
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f00000003c0))
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, 0x0, 0x20004000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x323500, 0x0)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
sync()
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)

03:59:48 executing program 7:
getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000040)=0x28)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:59:48 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x4, 0x5, 0x81, 0x0, 0x20, 0xa620, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x3}, 0xc104c70d77f15d40, 0x1, 0x6, 0x4, 0x40, 0x0, 0xfff7, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, r0, 0x4)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="06ff000000000000"], 0x400000)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280))
r1 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}], [{@fsmagic={'fsmagic', 0x3d, 0x20}}, {@subj_role={'subj_role', 0x3d, '*'}}, {@permit_directio}, {@pcr={'pcr', 0x3d, 0x17}}, {@euid_gt}, {@obj_user={'obj_user', 0x3d, 'huge=within_size'}}, {@obj_role={'obj_role', 0x3d, 'gid'}}, {@obj_type}, {@appraise_type}]})
mknodat$loop(r1, &(0x7f0000000180)='./file1\x00', 0x0, 0x1)
r2 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x2402c2, 0x1c0)
syz_read_part_table(0x2, 0x0, 0x0)
mknodat$loop(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x1)
symlinkat(&(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000180)=0x1)
ptrace$peek(0x2, 0x0, 0x0)
r3 = getgid()
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)}, {&(0x7f0000000300)="0d133f344535340ddf5167b7f64b7b9f4a545cf82ca4816edf785706f88efcd45cca7c7bf4a152c355d8f03744653dfc5cde3e580925acef1615dac400728cec76365d420c4f7d4ce382bf13e751bb2c031592a6a20847c9ac82617466430020cec342eeae2b5f936e749d87bd3e9109d234a35679beffd6b8463cecf285f157a1bc4d09abcb38203588502540c9b0d8458ff8c0f1d4f82ea0c382792034def9e039e58660204bb2267d637ccaa28f01778c4edad2e55e28ee70e8a95a742f43b947e2bd8c14272a78f97907dc1969b4099bad7f7e", 0xd5}], 0x2, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r3}}}], 0x80, 0x1}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {<r4=>0x0, 0xffffffffffffffff}}, './file1\x00'})
syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x8, 0x5, &(0x7f0000000740)=[{&(0x7f0000000340)="710e7c37b6abcf5acd23e2307a9aca835c5feb8563ff0204c34733e8f1143325bccf41e2fc4883334d578e34b5f1ec7ac09081e803b0897bcb1bcc3b4f7bee33cd9901a18367de3e6e8b50eef636158b3de56d631fb09338539130824919cde98e41e86b28944f350e7ca5f1f1d2c8dc77aefee10a290263e77b4e3e4637ba70d89b74b82eacb2ad8a8d6faa09603e8ace0a01393481b3f3cfa0896cf5dad990a04dd352a509c8397aca01acb7ec6a7dcfaf67457afc19a76e40d3513da007a8d47a", 0xc2, 0x3}, {&(0x7f0000000480)="816bb76e64af08aa78114bf4a59f20352e8f6f239189e4051b0030e896d2a0d724f15d4c7976320cbf86c2eca799698af749874bb6dc08ca1e36ab8611a284abe1d2f4c8f8013dfda9", 0x49, 0x4}, {&(0x7f0000000500)="1e02a9a7281b2630029867332544539bf0a80f19b89ddaf0877206831100b09dc4467f2b1adef0fe752cfbada3adb886260dd88ca2cb789b6489ec7943d5354784f06f7d3af2e0c82b38357796e96e7c473536540f25781a46645304bbc9c1f6d87d451a594275495186b967078f1311e2cdca709384b3e3fd63903732e9f9c0396a9ba3e4bb796b3b8d1caf543e0b5e5ff288cae2930dbb46738f280acb7493d9d3449dc68e95d9f848de1389cfd96b0e9426e1ba2533a4009654bac5a7424c050a0c22a57cf4b0a7ac47f4890951151ceddf212e78bc9e7387", 0xda, 0x10001}, {&(0x7f0000000600)="b93823b1f40db1eb9ff0c74acc6f1e231e288bfb7664337f4b25b7727d14e48a599bdd0c699a3a0fcb9c60e3b78b5ab443a7459b1a05d97d90cd1752b7e9f2bf281aae7fa7c069175868652319037bd56f2182a81787f87a6244d1865c1afbf2b42a653c87189b4098499da25829b56b0a48be4e40b4b19c347a9aadb5b030264b8835e2485c29619b88ee1619840d333707d30305", 0x95, 0x2}, {&(0x7f00000006c0)="2fde1d1c465ec6524de59fe6f716715885102761d2b870f85fd99faccd438d929c8ee23ca297cb224fa4b19c237840d9f139cbc51666a20543d7d9520816edb654ba4ddb5d9b2afecf18b8c5016c7332d0bbb0136c602f4affb1e1", 0x5b, 0x1f}], 0x20000, &(0x7f0000000800)={[{@huge_within_size}, {@huge_never}, {@nr_inodes={'nr_inodes', 0x3d, [0x0, 0x34, 0x25, 0x34, 0x70]}}, {@huge_never}, {@gid={'gid', 0x3d, r3}}, {@uid={'uid', 0x3d, r4}}], [{@uid_eq={'uid', 0x3d, 0xee01}}, {@subj_role={'subj_role', 0x3d, '/dev/hwrng\x00'}}, {@dont_hash}]})
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x44c81, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300))
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)

03:59:48 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x0)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:59:48 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x35e00)

03:59:48 executing program 0:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000000)={0x86387d85ff3e0573, 0x0, 0x10})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x0, 0x0})
pwritev(r0, &(0x7f0000001440)=[{&(0x7f0000000200)='T', 0x1}], 0x1, 0xffff, 0x0)
dup(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x8000, 0x0, 0x0, 0x5, 0x0, 0x9e, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = getpid()
r3 = getpid()
r4 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x1008})
kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={r4})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x10, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r1, 0x0, 0x100000)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[ 1952.195337] tmpfs: Unknown parameter 'fsmagic'
03:59:48 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, r0, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
syz_io_uring_setup(0x4d84, &(0x7f0000000000)={0x0, 0x43df, 0x4, 0x1, 0x3aa, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, r1, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ff8000/0x1000)=nil)
r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:59:48 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

03:59:48 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x0)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:59:48 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x36000)

[ 1952.523012] tmpfs: Unknown parameter 'fsmagic'
03:59:48 executing program 5:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x0)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

03:59:48 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
r0 = shmget(0x1, 0x3000, 0x20, &(0x7f0000ff9000/0x3000)=nil)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0x0, r1, 0x0)
r2 = getgid()
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)}, {&(0x7f0000000300)="0d133f344535340ddf5167b7f64b7b9f4a545cf82ca4816edf785706f88efcd45cca7c7bf4a152c355d8f03744653dfc5cde3e580925acef1615dac400728cec76365d420c4f7d4ce382bf13e751bb2c031592a6a20847c9ac82617466430020cec342eeae2b5f936e749d87bd3e9109d234a35679beffd6b8463cecf285f157a1bc4d09abcb38203588502540c9b0d8458ff8c0f1d4f82ea0c382792034def9e039e58660204bb2267d637ccaa28f01778c4edad2e55e28ee70e8a95a742f43b947e2bd8c14272a78f97907dc1969b4099bad7f7e", 0xd5}], 0x2, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r2}}}], 0x80, 0x1}, 0x0)
r3 = fork()
r4 = getpid()
prlimit64(r4, 0x0, &(0x7f0000000000), 0x0)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x1, r1, 0xffffffffffffffff, 0x0, r2, 0x4, 0x8000}, 0x200000, 0x81, 0x40, 0x5, r3, r4, 0x4})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r5, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

03:59:49 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(0x0, &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

04:00:02 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x36e00)

04:00:02 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(0x0, &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

04:00:02 executing program 5:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

04:00:02 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

04:00:02 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x5, 0x7, 0xb0, 0x3, 0x0, 0x5, 0x4, 0x9, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x1, 0x64}, 0x200, 0x20, 0xfff, 0x0, 0x401, 0x9, 0xffff, 0x0, 0x9, 0x0, 0x6}, 0xffffffffffffffff, 0xf, r0, 0x2)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
r2 = getpid()
prlimit64(r2, 0x0, &(0x7f0000000000), 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x1f, 0xd1, 0x7c, 0x0, 0x101, 0x8000, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000180)}, 0xa010, 0x1, 0x3, 0x3, 0x4, 0x5, 0x0, 0x0, 0x5f67}, r2, 0xf, 0xffffffffffffffff, 0xa)
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmctl$SHM_LOCK(r3, 0xb)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(r3, 0xc)
shmat(r3, &(0x7f0000ff6000/0x1000)=nil, 0x1000)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

04:00:02 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(0x0, &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

04:00:02 executing program 4:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:00:02 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r3, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:00:02 executing program 5:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

04:00:02 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(0x0, &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

04:00:02 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000100)="549e1edc16dc176a7974e28310589e44fe26a8933b90ead60b50590febf319770c53356612aa358928289f71d4ab4e416bfde0fef966d380ce660da03d158ca16df013d49f9ff36d575d47cf5a7bb3da727be7f934e5b8c59ffa002e4ef5528e45976266ca40408154c6fc683356e250857599173cbec85949a6355d12b37e9e306a0be3c560d834d4ad4d30659f4920eaecbdaf1c2bdde1d9a9381280bbf27c6ec0e52e28a29566cc634891e434b1416b06c1df5b28bcd063c72f66a9277127c4f35be2da5843", 0xc7)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

04:00:02 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x37000)

04:00:02 executing program 0:
clone(0x102080, &(0x7f0000000180)="416617fb592ff855779c3743a05d4dd138bae54340b9cd613d2a0ca0c53265a94e2d67053754abd7efd24de4ed62e9bdfd5d5d322a37eeb98bea4a722cacbe58182d83817fb4619d6805e2e5fe49ad29e2abf24c33d07f1521090c1e2113ef", &(0x7f0000000040), &(0x7f0000000340), &(0x7f0000000380)="28168c60314029c1db758f6cd6a9244c6b5d0d6a36d7a15c16a5818002285ca76153d101560e3f204aa35bc3f6e30aae9be57f83b3028fe0637ad9f352bb05d46bd2177f45f5d7448740bea86a9b998592")
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = open_tree(r0, 0x0, 0x0)
openat(r1, &(0x7f0000000240)='./file2\x00', 0x800, 0x0)
socketpair(0x11, 0x2, 0xffff, &(0x7f0000000400)={<r2=>0xffffffffffffffff})
sendmmsg(r2, &(0x7f0000008e00)=[{{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001540)="847c99c3de21f88090ce6814db744e2efe0634c21464a1825ad60e818caa37a572552b90ccfbe663ae20cf69f6168e649837af954e351c52", 0x38}, {&(0x7f0000001900)="8d05fd1a84153a9cd3b20c296f4a38fe93544c9eaf79e109812996b490e46371b12e7584b4311851344654c3d532ce88633bb95e92af515b0b21bebf5f58c9f3d6256d6f600b7f8c3355ccbfe7273d54e15b78d8d16f976a21b99de1ab8cf7af34f0b6eb5a323d3dd6cad9318b58ab8f9057f0af27d520d9981d6e6b5fc56f63e74b7e365ed741c152ed122aba7e52e23ab63083dc705825c74a8b5d63ad124b5dd7f4965eef446bbdcc31aa22c89e96ca95cde80e8c2705a149ea9501abadda580cf2628a1c1343e1d6c21aca5e93eaf11f29abd7c3a2b80cbab71ddd817c36ae52f3a5553842f1d5fbf746a70d66c8a345cd0710", 0xf5}, {&(0x7f0000001a00)="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", 0x1000}, {&(0x7f0000002a00)="53ee1c77a28a850991674e8a119f9d23fe2cadd794aa231287064632ae59a59a037c22e5fb02f92fdb1be809a740fc68091b581b5c09c379f7d8bdab5cbeef8d3ff7b2c2758f1e30f2357c03502ec5b9d1a64abbca25864e375d31b43faa0925ea504a002beb3b592823d12882a9a9378cea5c8cd5cbe7a2e16ed22f08c0d67495fa", 0x82}, {&(0x7f0000002ac0)="b02008b45b9e5d28c5eb0ef6afcdbebe0002970c4aa65ed264772e8c7de7f305bd4bfabe1aa3c2d7ce26505d0e23ac9c981ece1b306867bfca5f9d97335954a2d02d01b247f7df929ba2ae35e67eb2c7567e323fbef1035768b06f427536eda65e03a5ae59e5d89eedb1b4f6917c97052de9bb634bcdea5b6a62fd606be21d58505820ca0da596f41eafd9a8a2ab123c13049dce74d6fa4a5b790e704bc839554b572c222606f627", 0xa8}, {&(0x7f0000002b80)="79b8bee3894e3d3854e3777536a7d69f17cf00eb2dbce730656a58e7e2de6b95e1bc3ee9dbdad656b9db910b4df14c7c4cd89934b01c3143353f53e2f3e686a30ac3a0797c45dc2d76111a8ce55fd134453465ccf5a9b5b068ea89d6342cd24e52a5028acaefd7ab452d4f1375ae247215922bc53e19fbcf7048bb1f58c64e2829791a628d8c9692a29c371f10cb2bac4c70d92a550fc75d376f01ab51c2ee1de21c81fa7e422ec4b73e885b9b5a70546d2d713b09e8a5e6d47be92b44710c46f41bae5660702906882ec971cef4c64f6a7a", 0xd2}], 0x6, &(0x7f0000002d00)=ANY=[@ANYBLOB="0801000000000000040100000200000032e2cccdab3d7a12a6e27a184fc43da3fef227611d70731e373e34b923e1351b881f42c3b22a4cc2e41e50f8ed9dead52da9e319780cecbabf79e4583efe8dcda3d9568a7880cbaa125f5d08978561bf84fe34e17461e468be0866a3abea154ba9f9af2dded42fb94a7c72013b98808a202da89b7c7574b7495e1bc2cde1c8db4f9d4fc1d5b922ac882595e69523ba124505687819e91fc9e1c1309f423b68f5185f4df6ebc567322ca1fdfac9620300000079464dc8e6bfb674c5bac9bb03b897a9fdaef53cb2a9cc099f096b2737841890b32aaa9f4be21f569bb120866967033beb303c0c7fb1317adabb90bc9f98c4db0eb414ac00380000000000000017010000070000005e8d2745a991ffb9f7ed1a2a347f298e663c216f7c6a7bc4eeda5aaaea67ebd8e570d9280000000070000000000000000b01000001000080fd552f6a102ef2703d042997da4e9fccbf267a1f7362c74f068c6440c3a1fbee3886f6afdad0a096b7b7f65126465e0962301170f579feb3dd9402b0fe24f8869771320479350151e050739945836af942de1131e9b9adc99bc0d45269000000"], 0x1b0}}, {{&(0x7f0000002ec0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0x1, {0xa, 0x4e21, 0x7fffffff, @local, 0x6}}}, 0x80, &(0x7f0000004240)=[{&(0x7f0000002f40)="199aef48ecfd76f257aaed1a9456e0d3363e7689291a1a7e19814b900f6f69116045f87ff92f012a4937dbf0faec993382dee4c812de3d9c41aa3f0d85574b036d6ca1919437b77d5571ef3728f8996ced239d0babe836a0b2aa2f33037735f5055abb590557ace31019d579d9de5c7c8298d89979acac8fda3a347a9e0776f78ba19e09466837ee5011294c0372f785cbbad4deba06313429ed778311cf06ba8fc9445130c34d82e313", 0xaa}, {&(0x7f0000003000)="97b7e3e51aac17c85a235d513b1a20a1d93d10841ab114dd5c248a3ed5746d427f191250f77024b901d901fd4a67fbe774e9a3fe26c03d9a026663a53658fee10a157868a6da60ae7ce073d342d65319e480c08961da2624a5b46a6b00e13fbbec93ce8ce1753ee63cbe4cab7a5776402a3c75f6f050bc8f92923368394b2c52400eac4cc83a11df4626ecefb1690791f7e762956e185d3d8b248b652769f6824a1214be7124393b91e6adba071bbc41c702049424a7b59b5f12e140fe8d4e899e28567c6ec1be94f187e8f090cb06f4b39aec3821319c748861c03c452255a58fa9b6ecd0c5fc", 0xe7}, {&(0x7f0000003100)="e17f50ca203a1d9c2b05f4493b1adc76ae9fa5b2655d6b7af1227aa22ac20aebc1718970a66e20a844758a78aa6df7c5348c44ab5724ca70185e23e6703a587c97ec06257bfaa6bfdcb44be6a8aab0b1b4d29ee01fb3dec60fea5d2f226dac735bdca3e93593e3ba149d602d72d2e0815aa9d493b7a48c7dc643f35b1d0535d79e2319c97c00903efd710dc1208e70b93d0a95026e574ca30276b08c1f417ed6e523a912f09f20be9f3a047d08c4", 0xae}, {&(0x7f00000031c0)="09f94eda8716e7c8b29b6415762b81b0b55b843ac783f52bafaeba1036b1843d57a721b013219b38430aaed1d0b5de2b638b8f9dbef3b0889b", 0x39}, {&(0x7f0000003200)="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", 0x1000}, {&(0x7f0000004200)="4c269a77d7"}], 0x6, &(0x7f00000042c0)=[{0xa0, 0x2e, 0x9, "f6a251879bde71df262452c6479eb2eb05742fd881198b7967a6d78687216f8e69a42a57b2b40bb9b78f132d7ad8247a1040df9ce125de5f6f601a0f25e3af304a08b4987bd4bcea455158bdf1a20d305bbba6b3faea0d74c6627c98ab0f4c10e0bfad4d69863369ddd830ff31757abaab04d0f6d0c643e6720d7481b01a4d890ad3f6289115a2dd65e298"}, {0x20, 0x3a, 0xd9, "16528cc9eea7c9cb85ca9b180ca1"}, {0xb8, 0x118, 0xfffffffc, "b2154ea8e954fbc7a222eed50100000000000000cf829f3c38af456d4d60e41539f9046932bc9a65cad7063f72c131c48b9cb5b36c67fb1798d403de84594911e5e056b504f1466df50465ab1f5c0a208c24d4ca16104a44f1285bc71e9732b9226083557a7f0a7bf27f411d4046cedf55a81245095332f5d1e34e16d696c7e9d5d5476894080718c347c359478a6cc6d433cd5f84e1975d683b029a9ac7efefd617bbe0f2"}, {0x90, 0x104, 0x6, "1b72fa7190a23d2fe8032634c90cf98c6baed3f08647ab6d5a2077c69e4eae8c7ef3df94c871b1caa1e0d4cca4b2c4e13f4e7456111abe14c75445e1193510ccea883000a2c13450bdf34bd0a14621c26ecb4d5774d2d6274bef29a0e132a40f3bb5fcd74305c9742b62cbba2b22529dc940037c4e8fb6dfda"}, {0x1010, 0x111, 0x7, "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"}, {0xf8, 0x84, 0x1, "f20328b44a33df2b6a120a6778086ee43417626e105047ad5028bafd7bfb5eca61de7e0a39c8919081a84ab7f51059ce331eb484ff8636f0a110b425a301bdf50f9501df3649ff69284e093e07d07c55be0135b339cfdb542bec5d0887e6829a7a51f0f36b91f5f05498cf0fcbc733da5af8175a1f3bc3cda5b4f22cc1490751b94745daafb9d06335e20ad2b4fc5301e3d94145ccca2646d91aafcd615633c25de84406d6254f3bbf3767bf1eca4beed3b1b0256e036736735d00a604333de7faf922628a2a7469b4edc47b40c2e3ee0dfb7649bb0c9bd4889117bc7590e6552337fca5021b8d"}], 0x1310}}, {{&(0x7f0000005600)=@nfc={0x27, 0x1, 0x2, 0x1}, 0x80, &(0x7f0000006700)=[{&(0x7f0000005680)="4187202e5e9943d701176301c2575e004551c402a9c89cbcbc81369cb5daa474073bc4569ce2c0de708760eda616e12d35748c", 0x33}, {&(0x7f00000056c0)="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", 0x1000}, {&(0x7f00000066c0)="65bd27ed647b5225ff5a99f24425b53a6da5a971357706a1d149914d55adf8432637b1363b0225508d816311c810d116adeb", 0x32}], 0x3, &(0x7f0000006740)}}, {{&(0x7f0000008900)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, &(0x7f0000008bc0)=[{&(0x7f0000008980)="b72874a9cfdc6ab07eb4f468740fc4794a4d8151de684b5e74298be42c13928064bed0d63715ced9a2cd0ab90f813696f48347251f6f6203375e9ef1dd5212c4b8adf6c42bf98bcd3754ed", 0x4b}, {&(0x7f0000008a00)="57365c0d3fecbb24b1cc8e644eab1a5005044f6a22f3b8809bceb24b0da3eda78150038b822b7e4886e884c27b32374b25591ee075d7132d0ad1ace949c5d370a6412d016aa71b446641d012e25ced51f91b8f031206fc803a8f51f81b053251abf2424ae6f98b6eaec8e3321612b6f7898cf5e04d5e33193845c3a9a6c74214cac26c29ef6db0351e1d60a7575e4908e126b78df3bd4ff8fa9d2037e3de09a17fce8eff7f4ef426b9e756b85b1dbc8663d260c006dcd493f313ba1b02314bd74e333ae6ae08a618afb089b41df2d5789bff588394a0f42ba364", 0xda}, {&(0x7f0000008b00)="9af36558463e0b2ee03df3742c356d77130d152f50a52201ba48408b16321f1745dbb66803faddcde339029d1364fcb7dfb1e9cb9adccae9f5ee21a3c7d92f924cf5f9bb3aab803efa5e02953537cc450ddd01016e71ca699aa0c9fd5c084f7e39df7f00b8f79c51bf1f742becd5c3cdf1ef2249c9ad8b1b958c7809466fa3", 0x7f}, {&(0x7f0000008b80)="88c5ba656d037f450b99293036dfa32bbdcef14a85c8d58d8a50cbc1c3910c90eb9f3057656f276cc0a48eff49311e1bb55c7bfedb76e5", 0x37}], 0x4}}, {{&(0x7f0000008c00)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x2}}, 0x80, &(0x7f0000008d80)=[{&(0x7f0000008c80)="f95669201f8f8242011f2c6e879dbfa4b31cc758642bef756215e75d1bc85e398017f06413be6087791ff87c57750f2cdb38024285548e1498f6f2b9ef890a03cd35baa6405c8bf144b865ed617db9ab416341c286a4cb4759a6d6ec78d7ba3d4497abbd4f4e413c8c15258760bcffe0d94b753dd9cc4aac0ed27cccb0471e1472d48e3cf5c857b644be11cc3d835576925178490f058fc1f7897d6882922a8632a5c8db965e49bbc2d8700dee1b690461a1a44ceb67bfabf79a602656f8df1d6f3fe7e08edcc037aa2cbf7743646d99543f42704f89bee0fa43072f", 0xdc}], 0x1, &(0x7f0000008f40), 0x10}}], 0x5, 0x800)
chdir(&(0x7f0000000140)='./file0\x00')
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0x0, r3, 0x0)
quotactl(0x1000, &(0x7f0000000440)='./file1\x00', r3, &(0x7f0000000480)="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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0xffff, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0xb37bb9279454a00b, 0xc2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r4, 0x0, 0xfffffdef)
statx(r0, &(0x7f0000001580)='./file2\x00', 0x2000, 0x100, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000016c0)={{{@in=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@private}, 0x0, @in=@empty}}, &(0x7f00000017c0)=0xe8)
mount$9p_unix(&(0x7f0000001480)='./file1/file0\x00', &(0x7f00000014c0)='./file1\x00', &(0x7f0000001500), 0x3210400, &(0x7f0000001800)={'trans=unix,', {[{@cache_loose}, {@loose}, {@nodevmap}, {@cache_fscache}], [{@euid_lt}, {@smackfstransmute={'smackfstransmute', 0x3d, '@'}}, {@euid_eq={'euid', 0x3d, r6}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-['}}, {@euid_eq={'euid', 0x3d, r7}}, {@euid_gt={'euid>', r3}}, {@appraise}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}})

04:00:03 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
pread64(r0, &(0x7f0000000000)=""/9, 0x9, 0x9)
r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$IPC_RMID(r1, 0xc)
shmat(r1, &(0x7f0000ff7000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r1, &(0x7f0000ffa000/0x1000)=nil, 0x4800)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

04:00:03 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', 0x0, &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

04:00:03 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x37e00)

04:00:03 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$IPC_RMID(r1, 0xc)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

04:00:03 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

[ 1966.942476] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
04:00:03 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x0, 0x3}, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

04:00:03 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', 0x0, &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

04:00:15 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', 0x0, &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

04:00:15 executing program 4:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:00:15 executing program 5:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

04:00:15 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe1, 0x2000000000000000}, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

04:00:15 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x38000)

04:00:15 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r3, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:00:15 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

04:00:15 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', 0x0, &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x5, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

04:00:16 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/47)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
r1 = shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ff1000/0x2000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

04:00:16 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

04:00:16 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), 0x0, 0x0, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

04:00:29 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r2, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r3, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:00:29 executing program 4:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:00:29 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0xde, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x0, 0x0, 0x39, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x9, 0x7, 0x15, 0x3f, 0x0, 0x0, 0x5802, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8f, 0x2, @perf_config_ext={0x101, 0x61ae3c98}, 0x40, 0x2, 0x3ff, 0x0, 0xfffffffffffffff7, 0x10001, 0x4, 0x0, 0x7, 0x0, 0x1c0}, 0xffffffffffffffff, 0xa, r0, 0x1)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
shmctl$IPC_RMID(r1, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

04:00:29 executing program 0:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000480)="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")
newfstatat(0xffffffffffffff9c, &(0x7f0000003ac0)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'})
lstat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
syz_io_uring_setup(0x4d84, &(0x7f0000000000)={0x0, 0x43df, 0x4, 0x1, 0x3aa}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x101000, 0x14)
newfstatat(0xffffffffffffff9c, &(0x7f0000003ac0)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x0)
setresuid(0x0, r4, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x0)
setresuid(0x0, r5, 0x0)
fstat(r0, &(0x7f0000000200))
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
fsetxattr$system_posix_acl(r6, &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="020000002000040000eeffff", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=r8, @ANYBLOB="040003000000000008000600", @ANYBLOB="1000447c2c6f9b623edc23cc4afa04a600"], 0x3c, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {0x1, 0x424816762b91671}, [{0x2, 0x0, r1}, {0x2, 0x6, r2}, {0x2, 0x1, 0xee00}, {0x2, 0x4, 0xee00}, {0x2, 0x0, r3}, {0x2, 0x3, r4}, {0x2, 0x0, r5}], {0x4, 0x6}, [{0x8, 0x4}, {0x8, 0x1, 0xee01}, {0x8, 0x6, r7}, {0x8, 0x1}], {0x10, 0x2}}, 0x7c, 0x0)

04:00:29 executing program 5:
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x28, 0x5, 0x5, 0x3, 0x70bd25, 0x25dfdbff, {0x5, 0x0, 0x5}, [@typed={0x14, 0x21, 0x0, 0x0, @ipv6=@mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x80000, 0x28)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x16, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x9, &(0x7f0000000140)=<r0=>0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000100)={0x0, {}, 0x0, {}, 0x200, 0x0, 0x0, 0x0, "d96614744b0a889d127e6c6a4cca65f89cbf1394cecdf83937126da6d7288f6d0976a13fb18298c49b5381f9d29e9af79cba7e8de3ab71903895c0b9c6c5314f", "fe29b05a295e00590a851fdeb4ce6eca3e5a4220dffd6aa73cfb5ec827c72085"})
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x1b)
sendfile(r1, r2, &(0x7f0000000100)=0x30, 0x8)
getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f0000000200)=""/28, &(0x7f0000000240)=0x1c)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0)
io_submit(r0, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000001c0)=')', 0x1}])
ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x9d9d)
eventfd2(0x7, 0x0)
memfd_create(&(0x7f0000000400)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0)
r4 = getgid()
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)="d67c23958fc1bed2e937aad26ec968", 0xf}, {&(0x7f0000000300)="0d133f344535340ddf5167b7f64b7b9f4a545cf82ca4816edf785706f88efcd45cca7c7bf4a152c355d8f03744653dfc5cde3e580925acef1615dac400728cec76365d420c4f7d4ce382bf13e751bb2c031592a6a20847c9ac82617466430020cec342eeae2b5f936e749d87bd3e9109d234a35679beffd6b8463cecf285f157a1bc4d09abcb38203588502540c9b0d8458ff8c0f1d4f82ea0c382792034def9e039e58660204bb2267d637ccaa28f01778c4edad2e55e28ee70e8a95a742f43b947e2bd8c14272a78f97907dc1969b4099bad7f7e", 0xd5}], 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB="00232f1ab0c000"/16, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYBLOB="12601cb4c77d248e3f51f0d6964e6f3b6d58d9fcaef2951f9478177a543690afea3de8a52b39f2f4d0bbb7542990e27ae3d9bd1d6a0cd7b09844a26ffe3aeba2ebbb0739bef8ebdce6e048d28c6c7bc91d72c68af40985191090066ee910474f2f3770eaf8c558526c292c1dc72ece2daf132950e5ac7c0e991e448777", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00d21efabfc598d82ff3714938a6cc34540d83e7a00fac346ee4", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x80, 0x1}, 0x0)
syz_open_dev$rtc(&(0x7f0000000440), 0x7f, 0x40040)

04:00:29 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

04:00:29 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), 0x0, 0x0, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

04:00:29 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x38e00)

04:00:29 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = shmget(0x3, 0x4000, 0x54000000, &(0x7f0000ff6000/0x4000)=nil)
shmat(r0, &(0x7f0000ff2000/0x3000)=nil, 0x1000)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
shmctl$IPC_INFO(r0, 0x3, &(0x7f00000003c0)=""/4096)
shmctl$IPC_RMID(0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ff8000/0x4000)=nil)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

04:00:29 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c1042, 0x0)
r1 = fcntl$getown(r0, 0x9)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001740)={0x0, 0x0, "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", "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"})
perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x4, 0x3f, 0x4, 0x80, 0x0, 0x2, 0x4f000, 0xd, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x2, 0x2}, 0x509, 0x9, 0x200, 0x4, 0x8001, 0x8, 0x2, 0x0, 0xfffffffb, 0x0, 0x4}, r1, 0xd, r2, 0x9)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
fcntl$getown(r4, 0x9)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, 0x0)

04:00:29 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

[ 1993.440660] 
[ 1993.440827] ======================================================
[ 1993.441274] WARNING: possible circular locking dependency detected
[ 1993.441692] 6.2.0-next-20230303 #1 Not tainted
[ 1993.442031] ------------------------------------------------------
[ 1993.442469] syz-executor.0/13901 is trying to acquire lock:
[ 1993.442854] ffff88800ff6a170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x162/0x310
[ 1993.443594] 
[ 1993.443594] but task is already holding lock:
[ 1993.444016] ffff88800ff68b90 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_change_inode_journal_flag+0x17f/0x550
[ 1993.444777] 
[ 1993.444777] which lock already depends on the new lock.
[ 1993.444777] 
[ 1993.445355] 
[ 1993.445355] the existing dependency chain (in reverse order) is:
[ 1993.445877] 
[ 1993.445877] -> #3 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[ 1993.446386]        percpu_down_write+0x51/0x350
[ 1993.446733]        ext4_ind_migrate+0x23b/0x840
[ 1993.447093]        ext4_fileattr_set+0x1521/0x19f0
[ 1993.447460]        vfs_fileattr_set+0x7a2/0xbd0
[ 1993.447816]        do_vfs_ioctl+0xfc1/0x1690
[ 1993.448156]        __x64_sys_ioctl+0x110/0x210
[ 1993.448500]        do_syscall_64+0x3f/0x90
[ 1993.448815]        entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1993.449239] 
[ 1993.449239] -> #2 (&sb->s_type->i_mutex_key#6){++++}-{3:3}:
[ 1993.449765]        down_read+0x3d/0x50
[ 1993.450058]        ext4_bmap+0x52/0x470
[ 1993.450358]        bmap+0xb0/0x130
[ 1993.450615]        jbd2_journal_bmap+0xac/0x1d0
[ 1993.450968]        jbd2_journal_flush+0x87f/0xc90
[ 1993.451331]        __ext4_ioctl+0x9fd/0x4330
[ 1993.451667]        __x64_sys_ioctl+0x19e/0x210
[ 1993.452016]        do_syscall_64+0x3f/0x90
[ 1993.452330]        entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1993.452999] 
[ 1993.452999] -> #1 (&journal->j_checkpoint_mutex){+.+.}-{3:3}:
[ 1993.456850]        mutex_lock_io_nested+0x149/0x1300
[ 1993.457218]        jbd2_journal_flush+0x19e/0xc90
[ 1993.457562]        __ext4_ioctl+0x9fd/0x4330
[ 1993.457883]        __x64_sys_ioctl+0x19e/0x210
[ 1993.458220]        do_syscall_64+0x3f/0x90
[ 1993.458516]        entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1993.458929] 
[ 1993.458929] -> #0 (&journal->j_barrier){+.+.}-{3:3}:
[ 1993.459416]        __lock_acquire+0x2d56/0x6380
[ 1993.459781]        lock_acquire.part.0+0xea/0x320
[ 1993.460138]        __mutex_lock+0x133/0x14a0
[ 1993.460472]        jbd2_journal_lock_updates+0x162/0x310
[ 1993.460879]        ext4_change_inode_journal_flag+0x187/0x550
[ 1993.461326]        ext4_fileattr_set+0x14fa/0x19f0
[ 1993.461698]        vfs_fileattr_set+0x7a2/0xbd0
[ 1993.462052]        do_vfs_ioctl+0xfc1/0x1690
[ 1993.462386]        __x64_sys_ioctl+0x110/0x210
[ 1993.462734]        do_syscall_64+0x3f/0x90
[ 1993.463072]        entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1993.463649] 
[ 1993.463649] other info that might help us debug this:
[ 1993.463649] 
[ 1993.464410] Chain exists of:
[ 1993.464410]   &journal->j_barrier --> &sb->s_type->i_mutex_key#6 --> &sbi->s_writepages_rwsem
[ 1993.464410] 
[ 1993.465650]  Possible unsafe locking scenario:
[ 1993.465650] 
[ 1993.466218]        CPU0                    CPU1
[ 1993.466658]        ----                    ----
[ 1993.467113]   lock(&sbi->s_writepages_rwsem);
[ 1993.467558]                                lock(&sb->s_type->i_mutex_key#6);
[ 1993.468246]                                lock(&sbi->s_writepages_rwsem);
[ 1993.468902]   lock(&journal->j_barrier);
[ 1993.469300] 
[ 1993.469300]  *** DEADLOCK ***
[ 1993.469300] 
[ 1993.469866] 4 locks held by syz-executor.0/13901:
[ 1993.470344]  #0: ffff88800ff56438 (sb_writers#3){.+.+}-{0:0}, at: do_vfs_ioctl+0xf86/0x1690
[ 1993.471230]  #1: ffff88801bf08df0 (&sb->s_type->i_mutex_key#6){++++}-{3:3}, at: vfs_fileattr_set+0x14c/0xbd0
[ 1993.472091]  #2: ffff88801bf08f90 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_change_inode_journal_flag+0x126/0x550
[ 1993.472903]  #3: ffff88800ff68b90 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_change_inode_journal_flag+0x17f/0x550
[ 1993.473717] 
[ 1993.473717] stack backtrace:
[ 1993.474040] CPU: 0 PID: 13901 Comm: syz-executor.0 Not tainted 6.2.0-next-20230303 #1
[ 1993.474622] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1993.475226] Call Trace:
[ 1993.475420]  <TASK>
[ 1993.475593]  dump_stack_lvl+0x91/0xf0
[ 1993.475885]  check_noncircular+0x263/0x2e0
[ 1993.476211]  ? __pfx_check_noncircular+0x10/0x10
[ 1993.476570]  ? mark_lock.part.0+0xef/0x2f30
[ 1993.476910]  ? lock_release+0x1e3/0x710
[ 1993.477224]  ? __pfx_mark_lock.part.0+0x10/0x10
[ 1993.477581]  ? __pfx_lock_release+0x10/0x10
[ 1993.477918]  ? do_raw_spin_lock+0x125/0x270
[ 1993.478246]  __lock_acquire+0x2d56/0x6380
[ 1993.478569]  ? __pfx___lock_acquire+0x10/0x10
[ 1993.478936]  ? mark_lock.part.0+0xef/0x2f30
[ 1993.479264]  ? perf_trace_run_bpf_submit+0xf3/0x190
[ 1993.479628]  ? perf_trace_run_bpf_submit+0xf3/0x190
[ 1993.480000]  lock_acquire.part.0+0xea/0x320
[ 1993.480315]  ? jbd2_journal_lock_updates+0x162/0x310
[ 1993.480682]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 1993.481024]  ? jbd2_journal_lock_updates+0x162/0x310
[ 1993.481390]  ? rcu_read_lock_sched_held+0x42/0x80
[ 1993.481732]  ? trace_lock_acquire+0x170/0x1e0
[ 1993.482063]  ? jbd2_journal_lock_updates+0x162/0x310
[ 1993.482438]  ? lock_acquire+0x32/0xc0
[ 1993.482708]  ? jbd2_journal_lock_updates+0x162/0x310
[ 1993.483092]  __mutex_lock+0x133/0x14a0
[ 1993.483372]  ? jbd2_journal_lock_updates+0x162/0x310
[ 1993.483740]  ? lock_is_held_type+0x9f/0x120
[ 1993.484053]  ? jbd2_journal_lock_updates+0x162/0x310
[ 1993.484429]  ? __pfx___mutex_lock+0x10/0x10
[ 1993.484745]  ? lock_release+0x1e3/0x710
[ 1993.485046]  ? __pfx_lock_release+0x10/0x10
[ 1993.485372]  ? __pfx_do_raw_write_lock+0x10/0x10
[ 1993.485708]  ? lock_acquire+0x32/0xc0
[ 1993.485988]  ? jbd2_journal_lock_updates+0xc5/0x310
[ 1993.486371]  jbd2_journal_lock_updates+0x162/0x310
[ 1993.486723]  ? __pfx_jbd2_journal_lock_updates+0x10/0x10
[ 1993.487121]  ? _find_next_bit+0x11b/0x150
[ 1993.487435]  ? percpu_down_write+0x234/0x350
[ 1993.487758]  ? lock_is_held_type+0x9f/0x120
[ 1993.488074]  ext4_change_inode_journal_flag+0x187/0x550
[ 1993.488460]  ? __ext4_journal_stop+0x10b/0x1f0
[ 1993.488797]  ext4_fileattr_set+0x14fa/0x19f0
[ 1993.489128]  ? __pfx_ext4_fileattr_set+0x10/0x10
[ 1993.489477]  ? vfs_fileattr_set+0x14c/0xbd0
[ 1993.489792]  ? down_write+0x11a/0x1f0
[ 1993.490077]  ? __pfx_down_write+0x10/0x10
[ 1993.490372]  ? lock_acquire.part.0+0xea/0x320
[ 1993.490696]  ? fileattr_fill_flags+0x27f/0x320
[ 1993.491037]  vfs_fileattr_set+0x7a2/0xbd0
[ 1993.491341]  ? __pfx_vfs_fileattr_set+0x10/0x10
[ 1993.491680]  do_vfs_ioctl+0xfc1/0x1690
[ 1993.491971]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1993.492289]  ? inode_has_perm+0x171/0x1d0
[ 1993.492603]  ? __pfx_file_has_perm+0x10/0x10
[ 1993.492933]  ? __pfx___fget_files+0x10/0x10
[ 1993.493248]  ? lock_acquire+0x32/0xc0
[ 1993.493515]  ? __pfx___fget_files+0x10/0x10
[ 1993.493817]  ? selinux_file_ioctl+0xba/0x270
[ 1993.494143]  __x64_sys_ioctl+0x110/0x210
[ 1993.494439]  do_syscall_64+0x3f/0x90
[ 1993.494715]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1993.495109] RIP: 0033:0x7f74558d1b19
[ 1993.495379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1993.496635] RSP: 002b:00007f7452e47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1993.497173] RAX: ffffffffffffffda RBX: 00007f74559e4f60 RCX: 00007f74558d1b19
[ 1993.497678] RDX: 0000000020000040 RSI: 0000000040086602 RDI: 0000000000000003
[ 1993.498180] RBP: 00007f745592bf6d R08: 0000000000000000 R09: 0000000000000000
[ 1993.498681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1993.499194] R13: 00007ffee84d02cf R14: 00007f7452e47300 R15: 0000000000022000
[ 1993.499704]  </TASK>
04:00:29 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

04:00:29 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

04:00:29 executing program 5:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

04:00:29 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), 0x0, 0x0, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

04:00:29 executing program 4:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, 0x0, 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:00:39 executing program 0:
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/11)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff8000/0x4000)=nil)
mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3)
mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/90)

04:00:39 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x39000)

04:00:39 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x6}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ff5000/0x1000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/95)
shmctl$IPC_RMID(0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0)

04:00:39 executing program 5:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), 0x0, 0x0, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

04:00:39 executing program 2:
mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0xffffffffffffffff)
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0x3000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x3000)=nil, 0x5000)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
shmdt(0x0)
shmdt(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xcc, 0xff, 0x0, 0x5, 0x0, 0x27ac, 0x82020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp, 0x10406, 0x7, 0x5, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x0, 0x100000000})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0xe65)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040))
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
semop(0x0, 0x0, 0x0)

04:00:39 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='vfat\x00', 0x1000002, &(0x7f0000000480)='hugetlbfs\x00')
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200)
setxattr$security_capability(&(0x7f0000000540)='./file1/../file0\x00', &(0x7f0000000580), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x9}, {0x0, 0x200}], r2}, 0x18, 0x2)
epoll_create1(0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/91}, 0x63, 0x3, 0x2000)
open(&(0x7f0000000180)='./file1/../file0\x00', 0xc000, 0x8)
msgsnd(0x0, &(0x7f0000000240)={0x1, "85b15e5f95c3559b12b9ffeada88046362e5d3f8df4b7e"}, 0x1f, 0x800)

04:00:39 executing program 1:
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="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")
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4842, 0x0)
pwrite64(r0, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f0000000200)=[{r1, 0xf451165dbb42c082}], 0x1, 0x1245)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:00:39 executing program 4:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x20000, 0x2)
r1 = openat(0xffffffffffffff9c, 0x0, 0xc4842, 0x0)
pwrite64(r1, &(0x7f0000000140)="01", 0x2, 0x7fff)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x14040, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
clock_gettime(0x0, &(0x7f00000001c0))
clock_gettime(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/57, &(0x7f0000000100)=0x39)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)


VM DIAGNOSIS:
04:00:29  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=ffffffff8250d045 RDI=ffffffff87f14e60 RBP=ffffffff87f14e20 RSP=ffff8880471d6ff0
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001
R12=0000000000000000 R13=ffffffff87f14e20 R14=ffffffff87f14e70 R15=ffffffff87f150d8
RIP=ffffffff8250d09d RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f7452e47700 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe7203776000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe7203774000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2c526000 CR3=0000000039d80000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=ffff88803fb6d040
RSI=ffffffff815f420d RDI=0000000000000005 RBP=0000000000000000 RSP=ffff88806cf099d0
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001
R12=ffff88804640a958 R13=ffff88806cf09c80 R14=ffff88806cf09b38 R15=0000000000000008
RIP=ffffffff84491ba4 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fd4871b8700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe7f9345d000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe7f9345b000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff557279718 CR3=00000000381cc000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000