Warning: Permanently added '[localhost]:24965' (ECDSA) to the list of known hosts.
2022/10/31 12:58:15 fuzzer started
2022/10/31 12:58:15 dialing manager at localhost:40945
syzkaller login: [   44.581241] cgroup: Unknown subsys name 'net'
[   44.676543] cgroup: Unknown subsys name 'rlimit'
2022/10/31 12:58:29 syscalls: 2217
2022/10/31 12:58:29 code coverage: enabled
2022/10/31 12:58:29 comparison tracing: enabled
2022/10/31 12:58:29 extra coverage: enabled
2022/10/31 12:58:29 setuid sandbox: enabled
2022/10/31 12:58:29 namespace sandbox: enabled
2022/10/31 12:58:29 Android sandbox: enabled
2022/10/31 12:58:29 fault injection: enabled
2022/10/31 12:58:29 leak checking: enabled
2022/10/31 12:58:29 net packet injection: enabled
2022/10/31 12:58:29 net device setup: enabled
2022/10/31 12:58:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/10/31 12:58:29 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/10/31 12:58:29 USB emulation: enabled
2022/10/31 12:58:29 hci packet injection: enabled
2022/10/31 12:58:29 wifi device emulation: enabled
2022/10/31 12:58:29 802.15.4 emulation: enabled
2022/10/31 12:58:29 fetching corpus: 0, signal 0/2000 (executing program)
2022/10/31 12:58:29 fetching corpus: 50, signal 25957/29594 (executing program)
2022/10/31 12:58:30 fetching corpus: 100, signal 46431/51457 (executing program)
2022/10/31 12:58:30 fetching corpus: 150, signal 56788/63238 (executing program)
2022/10/31 12:58:30 fetching corpus: 200, signal 68910/76490 (executing program)
2022/10/31 12:58:30 fetching corpus: 250, signal 77712/86442 (executing program)
2022/10/31 12:58:30 fetching corpus: 300, signal 84629/94478 (executing program)
2022/10/31 12:58:30 fetching corpus: 350, signal 87870/98995 (executing program)
2022/10/31 12:58:30 fetching corpus: 400, signal 92325/104532 (executing program)
2022/10/31 12:58:31 fetching corpus: 450, signal 96423/109689 (executing program)
2022/10/31 12:58:31 fetching corpus: 500, signal 101504/115675 (executing program)
2022/10/31 12:58:31 fetching corpus: 550, signal 105196/120362 (executing program)
2022/10/31 12:58:31 fetching corpus: 600, signal 109081/125174 (executing program)
2022/10/31 12:58:31 fetching corpus: 650, signal 111363/128491 (executing program)
2022/10/31 12:58:31 fetching corpus: 700, signal 114290/132314 (executing program)
2022/10/31 12:58:31 fetching corpus: 750, signal 117281/136217 (executing program)
2022/10/31 12:58:32 fetching corpus: 800, signal 119586/139394 (executing program)
2022/10/31 12:58:32 fetching corpus: 850, signal 123456/143960 (executing program)
2022/10/31 12:58:32 fetching corpus: 900, signal 125104/146549 (executing program)
2022/10/31 12:58:32 fetching corpus: 950, signal 127849/150038 (executing program)
2022/10/31 12:58:32 fetching corpus: 1000, signal 130443/153395 (executing program)
2022/10/31 12:58:32 fetching corpus: 1050, signal 132952/156636 (executing program)
2022/10/31 12:58:32 fetching corpus: 1100, signal 134537/159050 (executing program)
2022/10/31 12:58:32 fetching corpus: 1150, signal 137626/162657 (executing program)
2022/10/31 12:58:32 fetching corpus: 1200, signal 139563/165354 (executing program)
2022/10/31 12:58:33 fetching corpus: 1250, signal 141725/168166 (executing program)
2022/10/31 12:58:33 fetching corpus: 1300, signal 145058/171908 (executing program)
2022/10/31 12:58:33 fetching corpus: 1350, signal 146427/173967 (executing program)
2022/10/31 12:58:33 fetching corpus: 1400, signal 147784/176003 (executing program)
2022/10/31 12:58:33 fetching corpus: 1450, signal 149886/178679 (executing program)
2022/10/31 12:58:33 fetching corpus: 1500, signal 151848/181185 (executing program)
2022/10/31 12:58:33 fetching corpus: 1549, signal 154310/184044 (executing program)
2022/10/31 12:58:33 fetching corpus: 1599, signal 155710/186098 (executing program)
2022/10/31 12:58:33 fetching corpus: 1649, signal 157921/188690 (executing program)
2022/10/31 12:58:33 fetching corpus: 1699, signal 159388/190753 (executing program)
2022/10/31 12:58:34 fetching corpus: 1749, signal 161471/193231 (executing program)
2022/10/31 12:58:34 fetching corpus: 1799, signal 162689/195008 (executing program)
2022/10/31 12:58:34 fetching corpus: 1849, signal 163858/196738 (executing program)
2022/10/31 12:58:34 fetching corpus: 1898, signal 165011/198418 (executing program)
2022/10/31 12:58:34 fetching corpus: 1948, signal 166291/200225 (executing program)
2022/10/31 12:58:34 fetching corpus: 1998, signal 168298/202458 (executing program)
2022/10/31 12:58:34 fetching corpus: 2048, signal 169300/204005 (executing program)
2022/10/31 12:58:35 fetching corpus: 2098, signal 170906/206012 (executing program)
2022/10/31 12:58:35 fetching corpus: 2148, signal 171794/207443 (executing program)
2022/10/31 12:58:35 fetching corpus: 2198, signal 173225/209221 (executing program)
2022/10/31 12:58:35 fetching corpus: 2247, signal 174633/210968 (executing program)
2022/10/31 12:58:35 fetching corpus: 2297, signal 176454/212978 (executing program)
2022/10/31 12:58:35 fetching corpus: 2346, signal 177618/214531 (executing program)
2022/10/31 12:58:35 fetching corpus: 2396, signal 179024/216213 (executing program)
2022/10/31 12:58:35 fetching corpus: 2446, signal 182131/218973 (executing program)
2022/10/31 12:58:36 fetching corpus: 2496, signal 183260/220432 (executing program)
2022/10/31 12:58:36 fetching corpus: 2546, signal 184629/221958 (executing program)
2022/10/31 12:58:36 fetching corpus: 2596, signal 185319/223132 (executing program)
2022/10/31 12:58:36 fetching corpus: 2646, signal 186329/224500 (executing program)
2022/10/31 12:58:36 fetching corpus: 2696, signal 187711/226146 (executing program)
2022/10/31 12:58:36 fetching corpus: 2746, signal 189010/227645 (executing program)
2022/10/31 12:58:36 fetching corpus: 2796, signal 189982/228934 (executing program)
2022/10/31 12:58:36 fetching corpus: 2846, signal 190615/230022 (executing program)
2022/10/31 12:58:37 fetching corpus: 2896, signal 191630/231331 (executing program)
2022/10/31 12:58:37 fetching corpus: 2946, signal 192706/232620 (executing program)
2022/10/31 12:58:37 fetching corpus: 2996, signal 193790/233886 (executing program)
2022/10/31 12:58:37 fetching corpus: 3046, signal 195033/235252 (executing program)
2022/10/31 12:58:37 fetching corpus: 3096, signal 195540/236174 (executing program)
2022/10/31 12:58:37 fetching corpus: 3146, signal 196585/237408 (executing program)
2022/10/31 12:58:37 fetching corpus: 3195, signal 197289/238416 (executing program)
2022/10/31 12:58:38 fetching corpus: 3244, signal 198642/239716 (executing program)
2022/10/31 12:58:38 fetching corpus: 3294, signal 199435/240771 (executing program)
2022/10/31 12:58:38 fetching corpus: 3344, signal 200423/241893 (executing program)
2022/10/31 12:58:38 fetching corpus: 3394, signal 201540/243131 (executing program)
2022/10/31 12:58:38 fetching corpus: 3444, signal 202093/244021 (executing program)
2022/10/31 12:58:38 fetching corpus: 3494, signal 203061/245140 (executing program)
2022/10/31 12:58:38 fetching corpus: 3544, signal 204261/246349 (executing program)
2022/10/31 12:58:38 fetching corpus: 3594, signal 205206/247379 (executing program)
2022/10/31 12:58:39 fetching corpus: 3643, signal 205770/248248 (executing program)
2022/10/31 12:58:39 fetching corpus: 3693, signal 206366/249119 (executing program)
2022/10/31 12:58:39 fetching corpus: 3743, signal 207360/250187 (executing program)
2022/10/31 12:58:39 fetching corpus: 3793, signal 207825/250933 (executing program)
2022/10/31 12:58:39 fetching corpus: 3843, signal 208522/251819 (executing program)
2022/10/31 12:58:39 fetching corpus: 3893, signal 209217/252682 (executing program)
2022/10/31 12:58:39 fetching corpus: 3943, signal 210176/253648 (executing program)
2022/10/31 12:58:39 fetching corpus: 3993, signal 211121/254583 (executing program)
2022/10/31 12:58:40 fetching corpus: 4043, signal 211852/255448 (executing program)
2022/10/31 12:58:40 fetching corpus: 4092, signal 212527/256273 (executing program)
2022/10/31 12:58:40 fetching corpus: 4142, signal 213307/257149 (executing program)
2022/10/31 12:58:40 fetching corpus: 4192, signal 213904/257926 (executing program)
2022/10/31 12:58:40 fetching corpus: 4242, signal 214425/258674 (executing program)
2022/10/31 12:58:40 fetching corpus: 4292, signal 215073/259446 (executing program)
2022/10/31 12:58:40 fetching corpus: 4342, signal 216274/260428 (executing program)
2022/10/31 12:58:40 fetching corpus: 4392, signal 216950/261210 (executing program)
2022/10/31 12:58:40 fetching corpus: 4442, signal 217905/262086 (executing program)
2022/10/31 12:58:41 fetching corpus: 4492, signal 218510/262853 (executing program)
2022/10/31 12:58:41 fetching corpus: 4542, signal 219174/263575 (executing program)
2022/10/31 12:58:41 fetching corpus: 4592, signal 219993/264338 (executing program)
2022/10/31 12:58:41 fetching corpus: 4640, signal 220985/265128 (executing program)
2022/10/31 12:58:41 fetching corpus: 4690, signal 221610/265810 (executing program)
2022/10/31 12:58:41 fetching corpus: 4740, signal 222462/266573 (executing program)
2022/10/31 12:58:41 fetching corpus: 4790, signal 223198/267288 (executing program)
2022/10/31 12:58:42 fetching corpus: 4839, signal 224055/268043 (executing program)
2022/10/31 12:58:42 fetching corpus: 4889, signal 224849/268742 (executing program)
2022/10/31 12:58:42 fetching corpus: 4939, signal 225430/269350 (executing program)
2022/10/31 12:58:42 fetching corpus: 4988, signal 226051/269987 (executing program)
2022/10/31 12:58:42 fetching corpus: 5038, signal 226719/270607 (executing program)
2022/10/31 12:58:42 fetching corpus: 5088, signal 227195/271154 (executing program)
2022/10/31 12:58:42 fetching corpus: 5138, signal 228005/271812 (executing program)
2022/10/31 12:58:42 fetching corpus: 5188, signal 228485/272392 (executing program)
2022/10/31 12:58:42 fetching corpus: 5237, signal 229038/273011 (executing program)
2022/10/31 12:58:43 fetching corpus: 5287, signal 229382/273479 (executing program)
2022/10/31 12:58:43 fetching corpus: 5335, signal 230593/274184 (executing program)
2022/10/31 12:58:43 fetching corpus: 5385, signal 231333/274763 (executing program)
2022/10/31 12:58:43 fetching corpus: 5435, signal 232078/275400 (executing program)
2022/10/31 12:58:43 fetching corpus: 5485, signal 232656/275920 (executing program)
2022/10/31 12:58:43 fetching corpus: 5535, signal 233199/276411 (executing program)
2022/10/31 12:58:43 fetching corpus: 5585, signal 234049/276992 (executing program)
2022/10/31 12:58:43 fetching corpus: 5635, signal 234995/277601 (executing program)
2022/10/31 12:58:43 fetching corpus: 5685, signal 235511/278055 (executing program)
2022/10/31 12:58:44 fetching corpus: 5735, signal 236266/278556 (executing program)
2022/10/31 12:58:44 fetching corpus: 5785, signal 236666/278975 (executing program)
2022/10/31 12:58:44 fetching corpus: 5835, signal 237379/279484 (executing program)
2022/10/31 12:58:44 fetching corpus: 5885, signal 238080/279947 (executing program)
2022/10/31 12:58:44 fetching corpus: 5935, signal 238609/280355 (executing program)
2022/10/31 12:58:44 fetching corpus: 5984, signal 239239/280785 (executing program)
2022/10/31 12:58:45 fetching corpus: 6034, signal 239925/281219 (executing program)
2022/10/31 12:58:45 fetching corpus: 6084, signal 240492/281621 (executing program)
2022/10/31 12:58:45 fetching corpus: 6134, signal 241264/282070 (executing program)
2022/10/31 12:58:45 fetching corpus: 6183, signal 241880/282463 (executing program)
2022/10/31 12:58:45 fetching corpus: 6232, signal 242403/282871 (executing program)
2022/10/31 12:58:45 fetching corpus: 6281, signal 242960/283254 (executing program)
2022/10/31 12:58:45 fetching corpus: 6331, signal 243577/283632 (executing program)
2022/10/31 12:58:46 fetching corpus: 6380, signal 244010/284018 (executing program)
2022/10/31 12:58:46 fetching corpus: 6430, signal 244552/284423 (executing program)
2022/10/31 12:58:46 fetching corpus: 6480, signal 245202/284789 (executing program)
2022/10/31 12:58:46 fetching corpus: 6530, signal 245571/285119 (executing program)
2022/10/31 12:58:46 fetching corpus: 6580, signal 246040/285440 (executing program)
2022/10/31 12:58:46 fetching corpus: 6630, signal 246443/285778 (executing program)
2022/10/31 12:58:46 fetching corpus: 6680, signal 246803/286103 (executing program)
2022/10/31 12:58:46 fetching corpus: 6729, signal 247258/286434 (executing program)
2022/10/31 12:58:46 fetching corpus: 6776, signal 247574/286740 (executing program)
2022/10/31 12:58:47 fetching corpus: 6826, signal 248129/287112 (executing program)
2022/10/31 12:58:47 fetching corpus: 6876, signal 248643/287407 (executing program)
2022/10/31 12:58:47 fetching corpus: 6926, signal 249089/287680 (executing program)
2022/10/31 12:58:47 fetching corpus: 6976, signal 249428/287942 (executing program)
2022/10/31 12:58:47 fetching corpus: 7025, signal 249847/288200 (executing program)
2022/10/31 12:58:47 fetching corpus: 7075, signal 250329/288449 (executing program)
2022/10/31 12:58:47 fetching corpus: 7125, signal 250890/288527 (executing program)
2022/10/31 12:58:48 fetching corpus: 7175, signal 251467/288529 (executing program)
2022/10/31 12:58:48 fetching corpus: 7224, signal 251918/288533 (executing program)
2022/10/31 12:58:48 fetching corpus: 7274, signal 252570/288533 (executing program)
2022/10/31 12:58:48 fetching corpus: 7324, signal 253101/288533 (executing program)
2022/10/31 12:58:48 fetching corpus: 7374, signal 253390/288533 (executing program)
2022/10/31 12:58:48 fetching corpus: 7424, signal 253875/288551 (executing program)
2022/10/31 12:58:48 fetching corpus: 7474, signal 254204/288551 (executing program)
2022/10/31 12:58:48 fetching corpus: 7524, signal 254619/288551 (executing program)
2022/10/31 12:58:48 fetching corpus: 7573, signal 255520/288551 (executing program)
2022/10/31 12:58:48 fetching corpus: 7623, signal 256157/288563 (executing program)
2022/10/31 12:58:49 fetching corpus: 7673, signal 256463/288578 (executing program)
2022/10/31 12:58:49 fetching corpus: 7723, signal 256955/288584 (executing program)
2022/10/31 12:58:49 fetching corpus: 7773, signal 257684/288587 (executing program)
2022/10/31 12:58:49 fetching corpus: 7822, signal 258262/288587 (executing program)
2022/10/31 12:58:49 fetching corpus: 7872, signal 258698/288587 (executing program)
2022/10/31 12:58:49 fetching corpus: 7922, signal 259136/288590 (executing program)
2022/10/31 12:58:49 fetching corpus: 7972, signal 259707/288590 (executing program)
2022/10/31 12:58:49 fetching corpus: 8022, signal 260156/288590 (executing program)
2022/10/31 12:58:50 fetching corpus: 8072, signal 260741/288590 (executing program)
2022/10/31 12:58:50 fetching corpus: 8122, signal 261135/288590 (executing program)
2022/10/31 12:58:50 fetching corpus: 8172, signal 261544/288590 (executing program)
2022/10/31 12:58:50 fetching corpus: 8222, signal 261951/288590 (executing program)
2022/10/31 12:58:50 fetching corpus: 8272, signal 262414/288590 (executing program)
2022/10/31 12:58:50 fetching corpus: 8322, signal 262939/288590 (executing program)
2022/10/31 12:58:50 fetching corpus: 8372, signal 263345/288590 (executing program)
2022/10/31 12:58:51 fetching corpus: 8422, signal 263801/288596 (executing program)
2022/10/31 12:58:51 fetching corpus: 8471, signal 264149/288596 (executing program)
2022/10/31 12:58:51 fetching corpus: 8521, signal 264532/288596 (executing program)
2022/10/31 12:58:51 fetching corpus: 8570, signal 265039/288596 (executing program)
2022/10/31 12:58:51 fetching corpus: 8620, signal 265533/288597 (executing program)
2022/10/31 12:58:51 fetching corpus: 8670, signal 265796/288598 (executing program)
2022/10/31 12:58:51 fetching corpus: 8720, signal 266405/288598 (executing program)
2022/10/31 12:58:52 fetching corpus: 8770, signal 266927/288599 (executing program)
2022/10/31 12:58:52 fetching corpus: 8820, signal 267450/288599 (executing program)
2022/10/31 12:58:52 fetching corpus: 8870, signal 267701/288600 (executing program)
2022/10/31 12:58:52 fetching corpus: 8920, signal 268105/288635 (executing program)
2022/10/31 12:58:52 fetching corpus: 8970, signal 268522/288638 (executing program)
2022/10/31 12:58:52 fetching corpus: 9020, signal 269116/288638 (executing program)
2022/10/31 12:58:52 fetching corpus: 9070, signal 269410/288638 (executing program)
2022/10/31 12:58:53 fetching corpus: 9120, signal 269788/288639 (executing program)
2022/10/31 12:58:53 fetching corpus: 9170, signal 270125/288639 (executing program)
2022/10/31 12:58:53 fetching corpus: 9220, signal 270523/288639 (executing program)
2022/10/31 12:58:53 fetching corpus: 9270, signal 270832/288641 (executing program)
2022/10/31 12:58:53 fetching corpus: 9320, signal 271145/288643 (executing program)
2022/10/31 12:58:53 fetching corpus: 9370, signal 271684/288644 (executing program)
2022/10/31 12:58:53 fetching corpus: 9420, signal 272225/288644 (executing program)
2022/10/31 12:58:54 fetching corpus: 9470, signal 272709/288644 (executing program)
2022/10/31 12:58:54 fetching corpus: 9520, signal 273014/288644 (executing program)
2022/10/31 12:58:54 fetching corpus: 9570, signal 273568/288650 (executing program)
2022/10/31 12:58:54 fetching corpus: 9620, signal 273997/288650 (executing program)
2022/10/31 12:58:54 fetching corpus: 9670, signal 274379/288650 (executing program)
2022/10/31 12:58:54 fetching corpus: 9719, signal 275047/288654 (executing program)
2022/10/31 12:58:54 fetching corpus: 9769, signal 275778/288654 (executing program)
2022/10/31 12:58:55 fetching corpus: 9818, signal 276112/288654 (executing program)
2022/10/31 12:58:55 fetching corpus: 9868, signal 276575/288654 (executing program)
2022/10/31 12:58:55 fetching corpus: 9918, signal 276964/288654 (executing program)
2022/10/31 12:58:55 fetching corpus: 9968, signal 277228/288654 (executing program)
2022/10/31 12:58:55 fetching corpus: 10018, signal 277518/288654 (executing program)
2022/10/31 12:58:55 fetching corpus: 10068, signal 277792/288654 (executing program)
2022/10/31 12:58:55 fetching corpus: 10118, signal 278108/288654 (executing program)
2022/10/31 12:58:55 fetching corpus: 10168, signal 278432/288654 (executing program)
2022/10/31 12:58:56 fetching corpus: 10218, signal 278780/288657 (executing program)
2022/10/31 12:58:56 fetching corpus: 10268, signal 279112/288657 (executing program)
2022/10/31 12:58:56 fetching corpus: 10318, signal 279447/288657 (executing program)
2022/10/31 12:58:56 fetching corpus: 10368, signal 279704/288657 (executing program)
2022/10/31 12:58:56 fetching corpus: 10418, signal 279962/288660 (executing program)
2022/10/31 12:58:56 fetching corpus: 10468, signal 280281/288660 (executing program)
2022/10/31 12:58:56 fetching corpus: 10518, signal 280522/288660 (executing program)
2022/10/31 12:58:56 fetching corpus: 10568, signal 280848/288660 (executing program)
2022/10/31 12:58:57 fetching corpus: 10618, signal 281321/288731 (executing program)
2022/10/31 12:58:57 fetching corpus: 10667, signal 281659/288742 (executing program)
2022/10/31 12:58:57 fetching corpus: 10717, signal 282079/288742 (executing program)
2022/10/31 12:58:57 fetching corpus: 10767, signal 282421/288742 (executing program)
2022/10/31 12:58:57 fetching corpus: 10805, signal 282626/288742 (executing program)
2022/10/31 12:58:57 fetching corpus: 10805, signal 282626/288742 (executing program)
2022/10/31 12:58:59 starting 8 fuzzer processes
12:58:59 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0x0, r1, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

12:58:59 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c)
bind$inet6(r0, &(0x7f00000044c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)

12:58:59 executing program 3:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz1\x00', 0x1ff)
kexec_load(0x0, 0x0, 0x0, 0x0)
kexec_load(0x2, 0x6, &(0x7f00000003c0)=[{&(0x7f0000000000)="665845d064009b88f8ac06ac046d10d437ad72149c2c4c80327f3b75ea9429b6e7ae4ed2dd53db4d00381cd2bce368c42aab39926b1edb237c7d93ef5d03314b9efe8e179f751aa81acf3bc65df4e1bbc567d593de41403a2ba7746b3611923d80fee877b908add2bb61ef22c2b4083ae91f26c4fb7fe09921eb9f641b0cf15ff077c0f86a422b5d8a1549a0ea25d16412d9978708273de8d050dbfa2111d4f2515c79dc634319ee2e9638fb30c4c03158cd881db7", 0xb5, 0x5, 0xfffffffffffffffc}, {&(0x7f00000000c0)="26f68196dd05a1d00cc55af6ff064916245a0ba68d7248515257243b567bd9d706e796753fff67eb3befbec0d29a5b6da4a0cb4c30b3b425f8f2e1a4fdb7a199f055b4de47c1f1dcff243f068382e81ff02d9adb597385f3af183a9654fcd070d6a1fd0385ff468eda05fe802c2c7424eb6e2b158fd520ae7979c0ea48d903358969290a3f5e05bddacbda79eceb77e5f5172947ed33", 0x96, 0x5, 0x79c}, {&(0x7f0000000180)="2415b816d0dd69a75d4d16015ee99fe35462ce3d764b915331932f93e2c44a8ba1de15d88254ad4fcab49a529ff96d0485d217c62a08b7d01ddfc5ce343c95a606924f5ddf11c356dd976ee735b72feb7ae3bb29b26f2dd744b819c8f6277a94959e5a532726", 0x66, 0x9, 0x3}, {&(0x7f0000000200)="81c97b1535429a0477186d6ff3cd54f8c24c6ff27ec7491ed95fd98cc2c3742a8d704b4ca5ea3aad77ac598c7d271ebe454784fa69a72aa00b3a6acb65977761c01ecc9ed2c21b7e8fdb03e2909b8f46ea874dc4a14a5775f9fc0e0ef61d258f119cb9c73bdedc39820bdb1238609426c39abf051d9a0ddeeeb10d7adbfe9099a0f2f3d08d730351a251d02ac67c2ae3752c40bf7eadd2032f0a41affe7f52b3a447375146c7fdd014", 0xa9, 0x2, 0xfff}, {&(0x7f00000002c0)="74bbf6bedacc7430", 0x8, 0xf664, 0x1}, {&(0x7f0000000300)="98e31e2eede602f165abb2d8a42ca4c71ad6e641bdf6d24a48d5e91a176dd0ac7038994d9f1d19d531e2e07fa139efba23fa752fc046f28c4256fcb5951fa55b784e28070bdfc4b520686c688af104f6fcf492e0939c4bed9fd81e102abc536925068d18bc078348d6affbdecf7ae1a93499441998fcb04a004500c1a160614cfc757d03902a91f8c9c121c7a6ff5ded3628018e3bd9a4e9dca0d24ed103f6a56c5d25f7fcd8a886fcb17795f0b07bde859047dae893b2", 0xb7, 0x800, 0x6}], 0x0)

12:58:59 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0), 0x4)

12:58:59 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)

[   88.711901] audit: type=1400 audit(1667221139.865:6): avc:  denied  { execmem } for  pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
12:58:59 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f00000003c0)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64=0x3f50}]}, 0x28}], 0x1}, 0x0)

12:58:59 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000007cd181000000000000000089"])
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6628)

12:58:59 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00')
pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)

[   89.930775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   89.933893] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   89.936374] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   89.940357] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   89.942146] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   89.945000] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   89.950735] Bluetooth: hci0: HCI_REQ-0x0c1a
[   89.980845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   89.992731] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   90.009867] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   90.011803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   90.013620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   90.016525] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   90.018568] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   90.022882] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   90.024443] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   90.026045] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   90.029364] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   90.035683] Bluetooth: hci1: HCI_REQ-0x0c1a
[   90.060685] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   90.066661] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   90.068406] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   90.071521] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   90.073642] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   90.075040] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   90.081307] Bluetooth: hci3: HCI_REQ-0x0c1a
[   90.116408] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   90.123252] Bluetooth: hci2: HCI_REQ-0x0c1a
[   90.131780] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   90.133040] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   90.134975] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   90.146949] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   90.149327] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   90.152335] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   90.153592] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   90.154472] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   90.156590] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   90.156946] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   90.157749] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   90.160559] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   90.161336] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   90.163935] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   90.165882] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   90.175196] Bluetooth: hci7: HCI_REQ-0x0c1a
[   90.180887] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   90.185948] Bluetooth: hci5: HCI_REQ-0x0c1a
[   90.198396] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   90.204446] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   90.221946] Bluetooth: hci6: HCI_REQ-0x0c1a
[   90.242811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   90.261429] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   90.265771] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   90.286505] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   90.298355] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   90.304720] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   90.318150] Bluetooth: hci4: HCI_REQ-0x0c1a
[   92.022646] Bluetooth: hci0: command 0x0409 tx timeout
[   92.086133] Bluetooth: hci3: command 0x0409 tx timeout
[   92.086204] Bluetooth: hci1: command 0x0409 tx timeout
[   92.151135] Bluetooth: hci2: command 0x0409 tx timeout
[   92.214156] Bluetooth: hci5: command 0x0409 tx timeout
[   92.214847] Bluetooth: hci7: command 0x0409 tx timeout
[   92.278382] Bluetooth: hci6: command 0x0409 tx timeout
[   92.342330] Bluetooth: hci4: command 0x0409 tx timeout
[   94.070442] Bluetooth: hci0: command 0x041b tx timeout
[   94.134189] Bluetooth: hci3: command 0x041b tx timeout
[   94.135684] Bluetooth: hci1: command 0x041b tx timeout
[   94.199292] Bluetooth: hci2: command 0x041b tx timeout
[   94.263211] Bluetooth: hci7: command 0x041b tx timeout
[   94.263991] Bluetooth: hci5: command 0x041b tx timeout
[   94.327247] Bluetooth: hci6: command 0x041b tx timeout
[   94.390150] Bluetooth: hci4: command 0x041b tx timeout
[   96.118464] Bluetooth: hci0: command 0x040f tx timeout
[   96.182196] Bluetooth: hci1: command 0x040f tx timeout
[   96.183027] Bluetooth: hci3: command 0x040f tx timeout
[   96.246222] Bluetooth: hci2: command 0x040f tx timeout
[   96.311357] Bluetooth: hci5: command 0x040f tx timeout
[   96.312152] Bluetooth: hci7: command 0x040f tx timeout
[   96.375166] Bluetooth: hci6: command 0x040f tx timeout
[   96.439168] Bluetooth: hci4: command 0x040f tx timeout
[   98.167188] Bluetooth: hci0: command 0x0419 tx timeout
[   98.230267] Bluetooth: hci3: command 0x0419 tx timeout
[   98.231129] Bluetooth: hci1: command 0x0419 tx timeout
[   98.294146] Bluetooth: hci2: command 0x0419 tx timeout
[   98.359176] Bluetooth: hci7: command 0x0419 tx timeout
[   98.359874] Bluetooth: hci5: command 0x0419 tx timeout
[   98.422170] Bluetooth: hci6: command 0x0419 tx timeout
[   98.486234] Bluetooth: hci4: command 0x0419 tx timeout
[  146.374816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.375580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.376787] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  146.619592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.620218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.621575] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  146.694358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.694933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.696414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  146.873694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.874467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.875887] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  147.217400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.218006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.219864] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  147.391659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.392292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.393658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  147.501031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.501662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.503088] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
12:59:58 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x46, &(0x7f0000001480), 0x4)

[  147.602113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.602702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.604179] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
12:59:58 executing program 2:
socketpair(0xa, 0x3, 0x2, &(0x7f0000000900))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

12:59:58 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0)
waitid(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0)

[  147.789838] audit: type=1400 audit(1667221198.943:7): avc:  denied  { open } for  pid=3892 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  147.792555] audit: type=1400 audit(1667221198.943:8): avc:  denied  { kernel } for  pid=3892 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
12:59:58 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00')
pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)

12:59:59 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0}, './file0\x00'})

12:59:59 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00')
pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)

[  147.900433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.900998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.902539] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  147.954673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.955637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.958398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
12:59:59 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000180)=0x8400c)
sendfile(r0, r0, 0x0, 0x100000)

12:59:59 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00')
pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)

[  148.036438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.037559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.038721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.039949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.044200] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  148.047610] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  148.261403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.262546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.275173] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  148.295662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.296579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.297813] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  148.465295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.466462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.472367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  148.516569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.517681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.519956] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  151.878187] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  151.878683] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  151.883150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  151.885668] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  151.886795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  151.889291] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  151.894663] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  151.896367] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  151.897511] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  151.898792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  151.900021] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  151.903709] Bluetooth: hci1: HCI_REQ-0x0c1a
[  151.904508] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  151.919009] Bluetooth: hci2: HCI_REQ-0x0c1a
[  151.938963] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  151.954339] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  151.977367] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  151.985347] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  151.989935] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  151.996694] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  152.017196] Bluetooth: hci4: HCI_REQ-0x0c1a
[  152.034465] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  152.040291] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  152.044741] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  152.051547] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  152.057324] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  152.061005] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  152.068266] Bluetooth: hci5: HCI_REQ-0x0c1a
[  153.718127] Bluetooth: hci0: Opcode 0x c03 failed: -110
[  153.974155] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  153.975405] Bluetooth: hci2: command 0x0409 tx timeout
[  153.976030] Bluetooth: hci1: command 0x0409 tx timeout
[  154.038206] Bluetooth: hci4: command 0x0409 tx timeout
[  154.103180] Bluetooth: hci5: command 0x0409 tx timeout
[  156.022173] Bluetooth: hci1: command 0x041b tx timeout
[  156.022663] Bluetooth: hci2: command 0x041b tx timeout
[  156.086102] Bluetooth: hci4: command 0x041b tx timeout
[  156.150187] Bluetooth: hci5: command 0x041b tx timeout
[  158.071146] Bluetooth: hci2: command 0x040f tx timeout
[  158.071872] Bluetooth: hci1: command 0x040f tx timeout
[  158.134241] Bluetooth: hci4: command 0x040f tx timeout
[  158.198187] Bluetooth: hci5: command 0x040f tx timeout
[  158.454195] Bluetooth: hci0: Opcode 0x c03 failed: -110
[  158.774221] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  160.118166] Bluetooth: hci1: command 0x0419 tx timeout
[  160.118612] Bluetooth: hci2: command 0x0419 tx timeout
[  160.183116] Bluetooth: hci4: command 0x0419 tx timeout
[  160.247175] Bluetooth: hci5: command 0x0419 tx timeout
[  161.215790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  161.220607] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  161.221456] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  161.228412] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  161.229299] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  161.229934] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  161.232515] Bluetooth: hci0: HCI_REQ-0x0c1a
[  161.405955] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  161.407237] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  161.408207] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  161.409579] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  161.410573] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  161.411210] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  161.414430] Bluetooth: hci6: HCI_REQ-0x0c1a
[  163.254162] Bluetooth: hci0: command 0x0409 tx timeout
[  163.446222] Bluetooth: hci6: command 0x0409 tx timeout
[  165.302190] Bluetooth: hci0: command 0x041b tx timeout
[  165.494278] Bluetooth: hci6: command 0x041b tx timeout
[  167.350160] Bluetooth: hci0: command 0x040f tx timeout
[  167.542114] Bluetooth: hci6: command 0x040f tx timeout
[  169.398189] Bluetooth: hci0: command 0x0419 tx timeout
[  169.590170] Bluetooth: hci6: command 0x0419 tx timeout
[  191.714022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.715414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.717859] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  191.943378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.944891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.948406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  192.064779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.065435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.067022] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  192.219332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.220512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.223160] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  192.664554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.666189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.670853] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  192.711876] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  192.803205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.803800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.805343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  193.714862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.715859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.718099] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  193.770774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.771848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.775477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  197.609824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.610585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.612164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  197.631970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.632874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.634141] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  197.843278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.844443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.846558] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  197.898170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.899647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.901909] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
13:00:49 executing program 0:
syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd606374400018000020010000000000000000000000000000200100000000000000000000000000000000c204"], 0x0)

13:00:49 executing program 7:
r0 = semget$private(0x0, 0x4, 0x0)
semtimedop(r0, &(0x7f0000001080)=[{0x0, 0x8}, {}], 0x2, 0x0)
semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0)

13:00:49 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000180)=0x8400c)
sendfile(r0, r0, 0x0, 0x100000)

13:00:49 executing program 6:
add_key$keyring(0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffff9)

13:00:49 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r0, 0x0)
r1 = clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10)
fork()
pidfd_open(0x0, 0x0)
getpgid(r1)

13:00:49 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)

13:00:49 executing program 3:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz1\x00', 0x1ff)
kexec_load(0x0, 0x0, 0x0, 0x0)
kexec_load(0x2, 0x6, &(0x7f00000003c0)=[{&(0x7f0000000000)="665845d064009b88f8ac06ac046d10d437ad72149c2c4c80327f3b75ea9429b6e7ae4ed2dd53db4d00381cd2bce368c42aab39926b1edb237c7d93ef5d03314b9efe8e179f751aa81acf3bc65df4e1bbc567d593de41403a2ba7746b3611923d80fee877b908add2bb61ef22c2b4083ae91f26c4fb7fe09921eb9f641b0cf15ff077c0f86a422b5d8a1549a0ea25d16412d9978708273de8d050dbfa2111d4f2515c79dc634319ee2e9638fb30c4c03158cd881db7", 0xb5, 0x5, 0xfffffffffffffffc}, {&(0x7f00000000c0)="26f68196dd05a1d00cc55af6ff064916245a0ba68d7248515257243b567bd9d706e796753fff67eb3befbec0d29a5b6da4a0cb4c30b3b425f8f2e1a4fdb7a199f055b4de47c1f1dcff243f068382e81ff02d9adb597385f3af183a9654fcd070d6a1fd0385ff468eda05fe802c2c7424eb6e2b158fd520ae7979c0ea48d903358969290a3f5e05bddacbda79eceb77e5f5172947ed33", 0x96, 0x5, 0x79c}, {&(0x7f0000000180)="2415b816d0dd69a75d4d16015ee99fe35462ce3d764b915331932f93e2c44a8ba1de15d88254ad4fcab49a529ff96d0485d217c62a08b7d01ddfc5ce343c95a606924f5ddf11c356dd976ee735b72feb7ae3bb29b26f2dd744b819c8f6277a94959e5a532726", 0x66, 0x9, 0x3}, {&(0x7f0000000200)="81c97b1535429a0477186d6ff3cd54f8c24c6ff27ec7491ed95fd98cc2c3742a8d704b4ca5ea3aad77ac598c7d271ebe454784fa69a72aa00b3a6acb65977761c01ecc9ed2c21b7e8fdb03e2909b8f46ea874dc4a14a5775f9fc0e0ef61d258f119cb9c73bdedc39820bdb1238609426c39abf051d9a0ddeeeb10d7adbfe9099a0f2f3d08d730351a251d02ac67c2ae3752c40bf7eadd2032f0a41affe7f52b3a447375146c7fdd014", 0xa9, 0x2, 0xfff}, {&(0x7f00000002c0)="74bbf6bedacc7430", 0x8, 0xf664, 0x1}, {&(0x7f0000000300)="98e31e2eede602f165abb2d8a42ca4c71ad6e641bdf6d24a48d5e91a176dd0ac7038994d9f1d19d531e2e07fa139efba23fa752fc046f28c4256fcb5951fa55b784e28070bdfc4b520686c688af104f6fcf492e0939c4bed9fd81e102abc536925068d18bc078348d6affbdecf7ae1a93499441998fcb04a004500c1a160614cfc757d03902a91f8c9c121c7a6ff5ded3628018e3bd9a4e9dca0d24ed103f6a56c5d25f7fcd8a886fcb17795f0b07bde859047dae893b2", 0xb7, 0x800, 0x6}], 0x0)

13:00:49 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x0)
unlink(&(0x7f0000000000)='./file1\x00')
pwrite64(r0, &(0x7f00000006c0)='y', 0x1, 0x0)
close(r0)

13:00:49 executing program 3:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz1\x00', 0x1ff)
kexec_load(0x0, 0x0, 0x0, 0x0)
kexec_load(0x2, 0x6, &(0x7f00000003c0)=[{&(0x7f0000000000)="665845d064009b88f8ac06ac046d10d437ad72149c2c4c80327f3b75ea9429b6e7ae4ed2dd53db4d00381cd2bce368c42aab39926b1edb237c7d93ef5d03314b9efe8e179f751aa81acf3bc65df4e1bbc567d593de41403a2ba7746b3611923d80fee877b908add2bb61ef22c2b4083ae91f26c4fb7fe09921eb9f641b0cf15ff077c0f86a422b5d8a1549a0ea25d16412d9978708273de8d050dbfa2111d4f2515c79dc634319ee2e9638fb30c4c03158cd881db7", 0xb5, 0x5, 0xfffffffffffffffc}, {&(0x7f00000000c0)="26f68196dd05a1d00cc55af6ff064916245a0ba68d7248515257243b567bd9d706e796753fff67eb3befbec0d29a5b6da4a0cb4c30b3b425f8f2e1a4fdb7a199f055b4de47c1f1dcff243f068382e81ff02d9adb597385f3af183a9654fcd070d6a1fd0385ff468eda05fe802c2c7424eb6e2b158fd520ae7979c0ea48d903358969290a3f5e05bddacbda79eceb77e5f5172947ed33", 0x96, 0x5, 0x79c}, {&(0x7f0000000180)="2415b816d0dd69a75d4d16015ee99fe35462ce3d764b915331932f93e2c44a8ba1de15d88254ad4fcab49a529ff96d0485d217c62a08b7d01ddfc5ce343c95a606924f5ddf11c356dd976ee735b72feb7ae3bb29b26f2dd744b819c8f6277a94959e5a532726", 0x66, 0x9, 0x3}, {&(0x7f0000000200)="81c97b1535429a0477186d6ff3cd54f8c24c6ff27ec7491ed95fd98cc2c3742a8d704b4ca5ea3aad77ac598c7d271ebe454784fa69a72aa00b3a6acb65977761c01ecc9ed2c21b7e8fdb03e2909b8f46ea874dc4a14a5775f9fc0e0ef61d258f119cb9c73bdedc39820bdb1238609426c39abf051d9a0ddeeeb10d7adbfe9099a0f2f3d08d730351a251d02ac67c2ae3752c40bf7eadd2032f0a41affe7f52b3a447375146c7fdd014", 0xa9, 0x2, 0xfff}, {&(0x7f00000002c0)="74bbf6bedacc7430", 0x8, 0xf664, 0x1}, {&(0x7f0000000300)="98e31e2eede602f165abb2d8a42ca4c71ad6e641bdf6d24a48d5e91a176dd0ac7038994d9f1d19d531e2e07fa139efba23fa752fc046f28c4256fcb5951fa55b784e28070bdfc4b520686c688af104f6fcf492e0939c4bed9fd81e102abc536925068d18bc078348d6affbdecf7ae1a93499441998fcb04a004500c1a160614cfc757d03902a91f8c9c121c7a6ff5ded3628018e3bd9a4e9dca0d24ed103f6a56c5d25f7fcd8a886fcb17795f0b07bde859047dae893b2", 0xb7, 0x800, 0x6}], 0x0)

13:00:49 executing program 5:
creat(&(0x7f0000000000)='./file1\x00', 0x0)
mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733d7463702c706f72749f130f573030303030303030303030346532312c63616368653d6d6d61702c76657273696f6e3d3970323030302e752c70726976706f7274"])

[  198.554592] 9pnet_fd: p9_fd_create_tcp (6715): problem connecting socket to 127.0.0.1
13:00:49 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000000b55abf003e0008166d1d59b19ea0bd9f1efb4f42ff969ecb66eb8c93"], 0x125)

13:00:49 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)

13:00:49 executing program 5:
creat(&(0x7f0000000000)='./file1\x00', 0x0)
mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733d7463702c706f72749f130f573030303030303030303030346532312c63616368653d6d6d61702c76657273696f6e3d3970323030302e752c70726976706f7274"])

13:00:49 executing program 7:
r0 = semget$private(0x0, 0x4, 0x0)
semtimedop(r0, &(0x7f0000001080)=[{0x0, 0x8}, {}], 0x2, 0x0)
semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0)

[  198.683506] 9pnet_fd: p9_fd_create_tcp (6725): problem connecting socket to 127.0.0.1
13:00:49 executing program 0:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/92, 0x5c)

13:00:49 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000180)=0x8400c)
sendfile(r0, r0, 0x0, 0x100000)

13:00:49 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000000b55abf003e0008166d1d59b19ea0bd9f1efb4f42ff969ecb66eb8c93"], 0x125)

13:00:49 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)

13:00:49 executing program 3:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz1\x00', 0x1ff)
kexec_load(0x0, 0x0, 0x0, 0x0)
kexec_load(0x2, 0x6, &(0x7f00000003c0)=[{&(0x7f0000000000)="665845d064009b88f8ac06ac046d10d437ad72149c2c4c80327f3b75ea9429b6e7ae4ed2dd53db4d00381cd2bce368c42aab39926b1edb237c7d93ef5d03314b9efe8e179f751aa81acf3bc65df4e1bbc567d593de41403a2ba7746b3611923d80fee877b908add2bb61ef22c2b4083ae91f26c4fb7fe09921eb9f641b0cf15ff077c0f86a422b5d8a1549a0ea25d16412d9978708273de8d050dbfa2111d4f2515c79dc634319ee2e9638fb30c4c03158cd881db7", 0xb5, 0x5, 0xfffffffffffffffc}, {&(0x7f00000000c0)="26f68196dd05a1d00cc55af6ff064916245a0ba68d7248515257243b567bd9d706e796753fff67eb3befbec0d29a5b6da4a0cb4c30b3b425f8f2e1a4fdb7a199f055b4de47c1f1dcff243f068382e81ff02d9adb597385f3af183a9654fcd070d6a1fd0385ff468eda05fe802c2c7424eb6e2b158fd520ae7979c0ea48d903358969290a3f5e05bddacbda79eceb77e5f5172947ed33", 0x96, 0x5, 0x79c}, {&(0x7f0000000180)="2415b816d0dd69a75d4d16015ee99fe35462ce3d764b915331932f93e2c44a8ba1de15d88254ad4fcab49a529ff96d0485d217c62a08b7d01ddfc5ce343c95a606924f5ddf11c356dd976ee735b72feb7ae3bb29b26f2dd744b819c8f6277a94959e5a532726", 0x66, 0x9, 0x3}, {&(0x7f0000000200)="81c97b1535429a0477186d6ff3cd54f8c24c6ff27ec7491ed95fd98cc2c3742a8d704b4ca5ea3aad77ac598c7d271ebe454784fa69a72aa00b3a6acb65977761c01ecc9ed2c21b7e8fdb03e2909b8f46ea874dc4a14a5775f9fc0e0ef61d258f119cb9c73bdedc39820bdb1238609426c39abf051d9a0ddeeeb10d7adbfe9099a0f2f3d08d730351a251d02ac67c2ae3752c40bf7eadd2032f0a41affe7f52b3a447375146c7fdd014", 0xa9, 0x2, 0xfff}, {&(0x7f00000002c0)="74bbf6bedacc7430", 0x8, 0xf664, 0x1}, {&(0x7f0000000300)="98e31e2eede602f165abb2d8a42ca4c71ad6e641bdf6d24a48d5e91a176dd0ac7038994d9f1d19d531e2e07fa139efba23fa752fc046f28c4256fcb5951fa55b784e28070bdfc4b520686c688af104f6fcf492e0939c4bed9fd81e102abc536925068d18bc078348d6affbdecf7ae1a93499441998fcb04a004500c1a160614cfc757d03902a91f8c9c121c7a6ff5ded3628018e3bd9a4e9dca0d24ed103f6a56c5d25f7fcd8a886fcb17795f0b07bde859047dae893b2", 0xb7, 0x800, 0x6}], 0x0)

13:00:49 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno'}}]}})

13:00:49 executing program 7:
r0 = semget$private(0x0, 0x4, 0x0)
semtimedop(r0, &(0x7f0000001080)=[{0x0, 0x8}, {}], 0x2, 0x0)
semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0)

13:00:49 executing program 5:
creat(&(0x7f0000000000)='./file1\x00', 0x0)
mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733d7463702c706f72749f130f573030303030303030303030346532312c63616368653d6d6d61702c76657273696f6e3d3970323030302e752c70726976706f7274"])

[  198.872695] 9pnet_fd: p9_fd_create_tcp (6744): problem connecting socket to 127.0.0.1
13:00:50 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
semtimedop(0x0, 0x0, 0x0, 0x0)

13:00:50 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000001fc0))

13:00:50 executing program 7:
r0 = semget$private(0x0, 0x4, 0x0)
semtimedop(r0, &(0x7f0000001080)=[{0x0, 0x8}, {}], 0x2, 0x0)
semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0)

13:00:50 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_group_source_req(r0, 0x0, 0xb, 0x0, 0x0)

13:00:50 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = dup(r0)
setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in=@loopback}, 0x0, @in=@dev}}, 0xe8)

13:00:50 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)=[&(0x7f0000000240)='e8dab99234bb312e'], &(0x7f0000000480)=[&(0x7f0000000380)='+(%\x00', 0x0, &(0x7f0000000400)='-(\x00', &(0x7f0000000440)='fscrypt:'], 0xe892c24b2829f4c5)

13:00:50 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000001540)=[{&(0x7f0000000100)=""/244, 0xfffffffffffffe95}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001280)=""/174, 0xae}, {&(0x7f0000001200)=""/38, 0x26}, {&(0x7f0000001340)=""/191, 0xbf}, {&(0x7f0000001400)=""/204, 0xcc}, {&(0x7f0000001500)=""/42, 0x2a}], 0x7)

13:00:50 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000180)=0x8400c)
sendfile(r0, r0, 0x0, 0x100000)

13:00:50 executing program 5:
creat(&(0x7f0000000000)='./file1\x00', 0x0)
mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733d7463702c706f72749f130f573030303030303030303030346532312c63616368653d6d6d61702c76657273696f6e3d3970323030302e752c70726976706f7274"])

[  199.172000] hrtimer: interrupt took 28914 ns
13:00:50 executing program 7:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0x80e85411, 0x0)

13:00:50 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno'}}]}})

13:00:50 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000000b55abf003e0008166d1d59b19ea0bd9f1efb4f42ff969ecb66eb8c93"], 0x125)

[  199.254694] 9pnet_fd: p9_fd_create_tcp (6769): problem connecting socket to 127.0.0.1
13:00:50 executing program 0:
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00')
ioctl$NS_GET_PARENT(r0, 0xb702, 0x0)

13:00:50 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = dup(r0)
setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in=@loopback}, 0x0, @in=@dev}}, 0xe8)

13:00:50 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)=[&(0x7f0000000240)='e8dab99234bb312e'], &(0x7f0000000480)=[&(0x7f0000000380)='+(%\x00', 0x0, &(0x7f0000000400)='-(\x00', &(0x7f0000000440)='fscrypt:'], 0xe892c24b2829f4c5)

13:00:50 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0)

13:00:50 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = dup(r0)
setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in=@loopback}, 0x0, @in=@dev}}, 0xe8)

13:00:50 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno'}}]}})

13:00:50 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000000b55abf003e0008166d1d59b19ea0bd9f1efb4f42ff969ecb66eb8c93"], 0x125)

13:00:50 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x7fffffff, 0x8001}, 0x1c)

13:00:50 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001b80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)

13:00:50 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000040)={'ip6tnl0\x00', 0x0})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10)

13:00:50 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = dup(r0)
setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in=@loopback}, 0x0, @in=@dev}}, 0xe8)

13:00:50 executing program 2:
mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0)
madvise(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x9)

13:00:50 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
openat(r0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0)

13:00:51 executing program 5:
clock_gettime(0x0, 0xfffffffffffffffc)

13:00:51 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno'}}]}})

13:00:51 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000380)=0xd, 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x14, 0x0, 0x1, 0x5}, 0x14}}, 0x0)

13:00:51 executing program 6:
r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x2, &(0x7f0000000140)='/\x00', &(0x7f0000000380)='./file1\x00', 0xffffffffffffff9c)

13:00:51 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84002, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
sendfile(r2, r2, 0x0, 0x100000)

13:00:51 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00')
readlinkat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)=""/205, 0xcd)

[  200.866971] syz-executor.3 (6815) used greatest stack depth: 22984 bytes left
13:00:52 executing program 6:
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
dup3(r1, r0, 0x0)

13:00:52 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000001e00), 0x0, 0x201)
ppoll(&(0x7f0000000340)=[{r0}], 0x1, &(0x7f0000000380)={0x0, 0x3938700}, 0x0, 0x0)

13:00:52 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)=[&(0x7f0000000240)='e8dab99234bb312e'], &(0x7f0000000480)=[&(0x7f0000000380)='+(%\x00', 0x0, &(0x7f0000000400)='-(\x00', &(0x7f0000000440)='fscrypt:'], 0xe892c24b2829f4c5)

13:00:52 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84002, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
sendfile(r2, r2, 0x0, 0x100000)

13:00:52 executing program 5:
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @remote}, @redirect={0x4, 0x0, 0x0, @multicast1, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @local, {[@rr={0x7, 0xb, 0x0, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}}}, 0x0)

13:00:52 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000040)={'ip6tnl0\x00', 0x0})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10)

13:00:52 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_score_adj\x00')
write$tcp_mem(r0, &(0x7f0000001280), 0x48)

13:00:52 executing program 5:
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @remote}, @redirect={0x4, 0x0, 0x0, @multicast1, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @local, {[@rr={0x7, 0xb, 0x0, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}}}, 0x0)

13:00:52 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000001e00), 0x0, 0x201)
ppoll(&(0x7f0000000340)=[{r0}], 0x1, &(0x7f0000000380)={0x0, 0x3938700}, 0x0, 0x0)

13:00:52 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)=[&(0x7f0000000240)='e8dab99234bb312e'], &(0x7f0000000480)=[&(0x7f0000000380)='+(%\x00', 0x0, &(0x7f0000000400)='-(\x00', &(0x7f0000000440)='fscrypt:'], 0xe892c24b2829f4c5)

13:00:52 executing program 6:
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
dup3(r1, r0, 0x0)

13:00:52 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
dup3(r1, r0, 0x0)

13:00:52 executing program 5:
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @remote}, @redirect={0x4, 0x0, 0x0, @multicast1, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @local, {[@rr={0x7, 0xb, 0x0, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}}}, 0x0)

13:00:52 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000001e00), 0x0, 0x201)
ppoll(&(0x7f0000000340)=[{r0}], 0x1, &(0x7f0000000380)={0x0, 0x3938700}, 0x0, 0x0)

13:00:53 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
dup3(r1, r0, 0x0)

13:00:53 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000001e00), 0x0, 0x201)
ppoll(&(0x7f0000000340)=[{r0}], 0x1, &(0x7f0000000380)={0x0, 0x3938700}, 0x0, 0x0)

13:00:53 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000040)={'ip6tnl0\x00', 0x0})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10)

13:00:53 executing program 5:
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @remote}, @redirect={0x4, 0x0, 0x0, @multicast1, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @local, {[@rr={0x7, 0xb, 0x0, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}}}, 0x0)

13:00:53 executing program 4:
socket$inet6(0xa, 0x3, 0x0)

13:00:53 executing program 6:
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
dup3(r1, r0, 0x0)

13:00:53 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84002, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
sendfile(r2, r2, 0x0, 0x100000)

13:00:53 executing program 1:
pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)
mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000), 0x6b7, 0x0)

13:00:53 executing program 6:
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
dup3(r1, r0, 0x0)

13:00:53 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
dup3(r1, r0, 0x0)

13:00:53 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000003c0)={0x0, 0x3ff, 0x5})

13:00:53 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10)

13:00:53 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="46efffff000000002e2f66696c653000"])
openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000040)={0x67, 0x3, &(0x7f00000007c0)})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000004c0))
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000180), &(0x7f0000000400)=0x4)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="94800000865d08d99c87d87a10df6e19ecb558c3122ffa7b1022356422ebe9bc783207e54ca30104c3d9afda4439926da04209da24dc26b4f8a8be61a25848fcd601775481de68279ba9", @ANYRES16=0x0, @ANYBLOB="000427bd7000fbdbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00010000000c008f009b000000000000000c009000b7000000000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00020000000c008f0009000000000000000c0090000200000000000000"], 0x94}, 0x1, 0x0, 0x0, 0x4040000}, 0x91)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000140)={0x1, 'team0\x00', {}, 0x465})
open(0x0, 0x0, 0x48)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x1, 0x3)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', <r4=>0x0})
sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}], 0x20}, 0x0)
open(&(0x7f0000000080)='./file1\x00', 0xc00, 0x0)

13:00:53 executing program 4:
syz_emit_ethernet(0x62, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tipc={{0xa, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @dev, {[@lsrr={0x83, 0x3, 0xf, [@remote, @local, @multicast1]}, @lsrr={0x83, 0x3}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}}}}}}}}, 0x0)

13:00:53 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {@wo_ht={{0x0, 0x2}, {}, @broadcast, @device_a, @random="40e23b874f80"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7}, @void}}]]}, 0x50}}, 0x0)

13:00:53 executing program 0:
add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa)
add_key$fscrypt_provisioning(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
fork()

13:00:54 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_DISALLOCATE(r0, 0x5424)

13:00:54 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
rmdir(&(0x7f0000000080)='./file1\x00')

13:00:54 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r0, 0x560b, 0x0)

13:00:54 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sync()

13:00:54 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, &(0x7f0000000440))

13:00:54 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_DISALLOCATE(r0, 0x5424)

13:00:54 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000040)={'ip6tnl0\x00', 0x0})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10)

13:00:54 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84002, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
sendfile(r2, r2, 0x0, 0x100000)

13:00:54 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
eventfd2(0x5, 0x80000)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x3, 0x7fff}, {0x5, 0x8000}, {0x4, 0x7d}, {0x7}, {0xc, 0x1}, {0x3, 0x200}, {0x81, 0x9}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="cb59080af0522b7a097ad2d9fa8c0fa2d6e144bcee5c6c3602af9b34e557025a12b76979fd75c1670677d807ae4bc46df2437d1e489bcd0d42376be2a82cc11b19c2fe9ad547d82806a8a2759cf7a9e4356014c8795e0de13fbf8b0f92c7f6ef4942c13ce63e0839fb02bbdf91731c5269a21b7d2208fe28b8f12938081f983f4eeae13caabb00ef288b2868c7fd89dd6d879f095c2b711d65569f0bab369c64f9963083a8334d25640fa38b65a3e7d21434be46f03d683afdcde3f6add3ffe7337d6865b420cf4ecc0920effd2efb4991c0a61d5ef78a3d1b3909393f4d52f519e31040d1a2b6bbe3057f62d6137c6c0294eb1ba47697ddb0cf0cf123ae93834de351c483b1f01e4afb68c45dc5e44235b6354cbe2b45a85a1d134b2a499dff3fe5df675c7c35828b7f10afc6c8faaf0266a0cbbec9c80076cf8fadea", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080))
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
dup(0xffffffffffffffff)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x119)

13:00:54 executing program 6:
r0 = syz_io_uring_setup(0x4001, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040))
syz_io_uring_setup(0x6208, &(0x7f0000000140)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f00000001c0))

13:00:54 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, &(0x7f0000000440))

13:00:54 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCGETS(r0, 0x5603, &(0x7f0000000040))

13:00:54 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_DISALLOCATE(r0, 0x5424)

[  203.561333] audit: type=1400 audit(1667221254.685:9): avc:  denied  { block_suspend } for  pid=6923 comm="syz-executor.0" capability=36  scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1
13:00:54 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sync()

13:00:54 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000011"], 0x2b)
read(r0, &(0x7f0000000080)=""/171, 0xab)

13:00:54 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, &(0x7f0000000440))

13:00:54 executing program 6:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x400448e3, &(0x7f0000000000)={0x0, 0x0, "9ba486"})

13:00:54 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_DISALLOCATE(r0, 0x5424)

[  203.756338] sg_write: data in/out 4316/1 bytes for SCSI command 0x0-- guessing data in;
[  203.756338]    program syz-executor.4 not setting count and/or reply_len properly
[  203.759008] sg_write: data in/out 4316/1 bytes for SCSI command 0x0-- guessing data in;
[  203.759008]    program syz-executor.4 not setting count and/or reply_len properly
13:00:55 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sync()

13:00:55 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, &(0x7f0000000440))

13:00:55 executing program 6:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000013c0)='/sys/module/pcmcia_core', 0x0, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000480)='syz1\x00', 0x1ff)

13:00:55 executing program 4:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x8}, @control}], 0xfffffdcd)

13:00:55 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040))
r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0)
dup2(r3, r0)

13:00:55 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
eventfd2(0x5, 0x80000)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x3, 0x7fff}, {0x5, 0x8000}, {0x4, 0x7d}, {0x7}, {0xc, 0x1}, {0x3, 0x200}, {0x81, 0x9}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="cb59080af0522b7a097ad2d9fa8c0fa2d6e144bcee5c6c3602af9b34e557025a12b76979fd75c1670677d807ae4bc46df2437d1e489bcd0d42376be2a82cc11b19c2fe9ad547d82806a8a2759cf7a9e4356014c8795e0de13fbf8b0f92c7f6ef4942c13ce63e0839fb02bbdf91731c5269a21b7d2208fe28b8f12938081f983f4eeae13caabb00ef288b2868c7fd89dd6d879f095c2b711d65569f0bab369c64f9963083a8334d25640fa38b65a3e7d21434be46f03d683afdcde3f6add3ffe7337d6865b420cf4ecc0920effd2efb4991c0a61d5ef78a3d1b3909393f4d52f519e31040d1a2b6bbe3057f62d6137c6c0294eb1ba47697ddb0cf0cf123ae93834de351c483b1f01e4afb68c45dc5e44235b6354cbe2b45a85a1d134b2a499dff3fe5df675c7c35828b7f10afc6c8faaf0266a0cbbec9c80076cf8fadea", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080))
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
dup(0xffffffffffffffff)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x119)

13:00:55 executing program 7:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000240), 0x3e)

13:00:55 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
eventfd2(0x5, 0x80000)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x3, 0x7fff}, {0x5, 0x8000}, {0x4, 0x7d}, {0x7}, {0xc, 0x1}, {0x3, 0x200}, {0x81, 0x9}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080))
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
dup(0xffffffffffffffff)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x119)

13:00:55 executing program 4:
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0)
write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:fsadm_log_t:s0\x00', 0x21)

13:00:55 executing program 7:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
symlink(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00')
syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00'}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0)

13:00:55 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sync()

[  204.668029] audit: type=1400 audit(1667221255.820:10): avc:  denied  { create } for  pid=6974 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:fsadm_log_t:s0 tclass=key permissive=1
13:00:55 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040))
r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0)
dup2(r3, r0)

13:00:55 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040))
r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0)
dup2(r3, r0)

13:00:56 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x2, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000180), 0x4}, 0x0, 0x4, 0xfffffffd, 0x6, 0x0, 0x0, 0x101, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab', 0x0, 0x0)
getdents64(r1, &(0x7f0000000240)=""/217, 0xd9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa9}}, 0x14)
r3 = syz_open_dev$loop(0x0, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000380)={r3, 0x0, 0x1, 0x400})
r5 = gettid()
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x9, 0x1, 0xfe, 0x8, 0x0, 0x7fff, 0x44030, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x0, 0x2}, 0x290, 0x9, 0x8, 0x9, 0x3f, 0x7, 0x6, 0x0, 0x0, 0x0, 0x7}, r5, 0x3, r0, 0x0)
socket$inet6(0xa, 0x3, 0x5)

13:00:56 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
tgkill(r0, r0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc1, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4)
r1 = syz_io_uring_setup(0x56ad, &(0x7f0000000140)={0x0, 0x6c4c, 0x0, 0x0, 0x212}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000300))
write$sndseq(0xffffffffffffffff, &(0x7f0000000140)=[{0x23, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x1c)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r3 = syz_io_uring_setup(0x0, &(0x7f0000000700)={0x0, 0x0, 0x4, 0x2, 0x309, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000240)={0x302, @tick=0x8bfa, 0x40, {0x80, 0x2}, 0x7, 0x1, 0x2})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000200)={0x40, @time={0x81, 0x1}, 0x19, {0x24, 0xd6}, 0x3, 0x1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0)
close(r4)
syz_io_uring_setup(0x35a6, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x0, 0x375, 0x0, r3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)=<r5=>0x0)
syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2)

13:00:56 executing program 7:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0))

13:00:56 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040))
r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0)
dup2(r3, r0)

[  205.129906] audit: type=1400 audit(1667221256.283:11): avc:  denied  { write } for  pid=6986 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  205.208006] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  205.209275] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  205.210214] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  205.211119] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[  205.212103] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 2
[  205.216526] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  205.217409] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  205.218584] Buffer I/O error on dev sr0, logical block 0, async page read
[  205.219788] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  205.220968] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  205.222031] Buffer I/O error on dev sr0, logical block 1, async page read
[  205.223388] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  205.224153] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  205.225235] Buffer I/O error on dev sr0, logical block 2, async page read
[  205.229385] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  205.230184] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  205.231445] Buffer I/O error on dev sr0, logical block 3, async page read
[  205.232596] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  205.233350] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  205.234445] Buffer I/O error on dev sr0, logical block 4, async page read
[  205.235604] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  205.236389] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  205.237477] Buffer I/O error on dev sr0, logical block 5, async page read
[  205.238621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  205.239389] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  205.240449] Buffer I/O error on dev sr0, logical block 6, async page read
[  205.259483] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  205.260683] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  205.261777] Buffer I/O error on dev sr0, logical block 7, async page read
13:00:56 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040))
r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0)
dup2(r3, r0)

13:00:56 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
eventfd2(0x5, 0x80000)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x3, 0x7fff}, {0x5, 0x8000}, {0x4, 0x7d}, {0x7}, {0xc, 0x1}, {0x3, 0x200}, {0x81, 0x9}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080))
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
dup(0xffffffffffffffff)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x119)

13:00:56 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000001c0))

13:00:56 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040))
r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0)
dup2(r3, r0)

13:00:56 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x2, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000180), 0x4}, 0x0, 0x4, 0xfffffffd, 0x6, 0x0, 0x0, 0x101, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab', 0x0, 0x0)
getdents64(r1, &(0x7f0000000240)=""/217, 0xd9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa9}}, 0x14)
r3 = syz_open_dev$loop(0x0, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000380)={r3, 0x0, 0x1, 0x400})
r5 = gettid()
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x9, 0x1, 0xfe, 0x8, 0x0, 0x7fff, 0x44030, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x0, 0x2}, 0x290, 0x9, 0x8, 0x9, 0x3f, 0x7, 0x6, 0x0, 0x0, 0x0, 0x7}, r5, 0x3, r0, 0x0)
socket$inet6(0xa, 0x3, 0x5)

13:00:56 executing program 7:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0))

13:00:56 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c07, 0xffffffffffffffff)

13:00:56 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
eventfd2(0x5, 0x80000)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x3, 0x7fff}, {0x5, 0x8000}, {0x4, 0x7d}, {0x7}, {0xc, 0x1}, {0x3, 0x200}, {0x81, 0x9}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080))
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
dup(0xffffffffffffffff)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x119)

[  205.494543] loop5: detected capacity change from 0 to 40
13:00:56 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0xc}}, 0x14}}, 0x0)

13:00:56 executing program 7:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0))

13:00:56 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040))
r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0)
dup2(r3, r0)

13:00:56 executing program 5:
r0 = inotify_init1(0x0)
io_setup(0xb, &(0x7f0000000140)=<r1=>0x0)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000005c0))
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0)
io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000003c0)="1b", 0x1}])
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240))
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

13:00:56 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x17e})
link(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00')

13:00:56 executing program 7:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0))

13:00:57 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0xf)
sendmsg$nl_netfilter(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000080)={0x7f8, 0x0, 0x9, 0x401, 0x0, 0x0, {}, [@nested={0x14d, 0x0, 0x0, 0x1, [@generic="37bedc750af87ac5d87cca0a6b547e3a0510751a50d732e64811303a94c2e747173f4e3fa44fa60268396feca40856837924485a9a937c5110202ec7ddb4b034375ccfbf3b107303e574071888487a1e970e19a96502a944627236f82cb95263eeafa7e8ad624cf75be5a1f9bb98116a290bb6b837f81128e254b5689e6ca2337e2541dca2d3527c17a49a5335e0859472d29c5e990f9baeda3eceb808a115ad17037e80cc90e7f59da736308f795dbad8627384c30bb25b2aa6a81745362a0d49a59541b34351ea0a709575a8826f2135300ca377858cc9d1ed6f9d5e158e5363f1699de82810abb8447ae6c9889e9882665974bb3f48af597f8e", @generic="71b94f468e4401da4aecd361b53f504aa45ad6814d51e3f1c7ff6fc19486b0709ccd11778a89f944899587f864feb9ed7f806b3140b2b9ced6d8", @typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x691, 0x0, 0x0, 0x1, [@generic="1469325ff781b5dadb9b5a1608dcbced369dd5b1774acfe08264886f49f852fb3bf2f1e9fd04e732acb1f60ceba21726873034472b33f235663187eee3e143e3793d81ea16d37f1f", @typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @generic="3e9119844f275a0d3ae77effcb908f3e752d56814935e3c81154a2358ee74fbb0141dbbefcd54214e8b815c6cbb69580d290b1514aef2ee9c0071f62736e6a33dd3bb6c31936728defd9d6ee2ed837f31083406383ac9d6054f106336ddb0f1944d849f607bc7f4c236a8afc07f7f0677ff3dab9d95b4217fb119b651c75aeb1c6e3d4aebe088a151d87898ce88487ff59", @generic="3f94a3d7d8fafd5a43397346f6eb3e24cdddf6794ffef5463e98f5291b3faabc0a45f65c2341de08fac4f428dcfe1beb9b09732903d0a59a313b43026ced0780ee878c2e9fb97cc149ca004e0f9689972844b51972693a3d7ac12fc703040bc4a22b0a51d5230e1501dd3eee93fdb662126437c4e4cfc015dac344bf6ee1646b0166cbf5616fc704943e622c9d0e3df12f2474b18119f5b8e3a5eacd3cced1c2b4997c784477317280a3180805969c63ad7496d700063e496fbd13ff74917e07ae24a70702985b460f64", @generic="8709cc2d55990dfeb2079587d1cd79b72d005aa2c000fa32ecf329958a5d49db3a33226832dbd1ba614c0d1f6cbb3cf5c7be1e9a926a40556dd22ee6bf05d5513ca7c7c9ae55385e886a9a2754b0fed0ef30c8b955d55b7709eb74c7aaca36dcd40d809586763840113a64f5c46cf9ff0b4d75b146d0093fd2bdf2635420ef09bb67c3a7fc551bd77bc2b1241aa69cb6007d1e7c7059", @generic="60bcf3549dca221a0de8819062a826879a59e4e260a2770246afb50d9f2ab5cdccc4fd0d70f6b67bcc068328eefc29a89afaf6caa594b38bf21e34139db1326b30c83803c14177b579a1e86475e4ef470fe5a5b87edec656801e47bcf0c72a73ad8368ed4f52908d16ce2e0831e1ee819827d79fa27d71ec085202101eab61a0e8957cd68dceba92ecfd2fe4d4e9b248b2bedf2a0b2fda8d8c7d12971c9cd8d9c3bf7b899f9978ab8bd8550d1f5a192b5b00061db2155991a02b73670faa2964bcd876376ef5d619e6388438a1f8c50105", @typed={0x10, 0x0, 0x0, 0x0, @str='\'-{/\xd3{*\\.\xa5\xa7\x00'}, @generic="eb98609d87", @generic="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"]}]}, 0x7f8}}, 0x0)

13:00:57 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x2, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000180), 0x4}, 0x0, 0x4, 0xfffffffd, 0x6, 0x0, 0x0, 0x101, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab', 0x0, 0x0)
getdents64(r1, &(0x7f0000000240)=""/217, 0xd9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa9}}, 0x14)
r3 = syz_open_dev$loop(0x0, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000380)={r3, 0x0, 0x1, 0x400})
r5 = gettid()
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x9, 0x1, 0xfe, 0x8, 0x0, 0x7fff, 0x44030, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x0, 0x2}, 0x290, 0x9, 0x8, 0x9, 0x3f, 0x7, 0x6, 0x0, 0x0, 0x0, 0x7}, r5, 0x3, r0, 0x0)
socket$inet6(0xa, 0x3, 0x5)

[  206.119895] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  206.120761] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  206.121520] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  206.122108] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00
[  206.122746] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 2
[  206.124264] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.124745] Buffer I/O error on dev sr0, logical block 0, async page read
[  206.125567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.126087] Buffer I/O error on dev sr0, logical block 1, async page read
13:00:57 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0)
write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='#'], 0xb)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0)

13:00:57 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0xf)
sendmsg$nl_netfilter(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000080)={0x7f8, 0x0, 0x9, 0x401, 0x0, 0x0, {}, [@nested={0x14d, 0x0, 0x0, 0x1, [@generic="37bedc750af87ac5d87cca0a6b547e3a0510751a50d732e64811303a94c2e747173f4e3fa44fa60268396feca40856837924485a9a937c5110202ec7ddb4b034375ccfbf3b107303e574071888487a1e970e19a96502a944627236f82cb95263eeafa7e8ad624cf75be5a1f9bb98116a290bb6b837f81128e254b5689e6ca2337e2541dca2d3527c17a49a5335e0859472d29c5e990f9baeda3eceb808a115ad17037e80cc90e7f59da736308f795dbad8627384c30bb25b2aa6a81745362a0d49a59541b34351ea0a709575a8826f2135300ca377858cc9d1ed6f9d5e158e5363f1699de82810abb8447ae6c9889e9882665974bb3f48af597f8e", @generic="71b94f468e4401da4aecd361b53f504aa45ad6814d51e3f1c7ff6fc19486b0709ccd11778a89f944899587f864feb9ed7f806b3140b2b9ced6d8", @typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x691, 0x0, 0x0, 0x1, [@generic="1469325ff781b5dadb9b5a1608dcbced369dd5b1774acfe08264886f49f852fb3bf2f1e9fd04e732acb1f60ceba21726873034472b33f235663187eee3e143e3793d81ea16d37f1f", @typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @generic="3e9119844f275a0d3ae77effcb908f3e752d56814935e3c81154a2358ee74fbb0141dbbefcd54214e8b815c6cbb69580d290b1514aef2ee9c0071f62736e6a33dd3bb6c31936728defd9d6ee2ed837f31083406383ac9d6054f106336ddb0f1944d849f607bc7f4c236a8afc07f7f0677ff3dab9d95b4217fb119b651c75aeb1c6e3d4aebe088a151d87898ce88487ff59", @generic="3f94a3d7d8fafd5a43397346f6eb3e24cdddf6794ffef5463e98f5291b3faabc0a45f65c2341de08fac4f428dcfe1beb9b09732903d0a59a313b43026ced0780ee878c2e9fb97cc149ca004e0f9689972844b51972693a3d7ac12fc703040bc4a22b0a51d5230e1501dd3eee93fdb662126437c4e4cfc015dac344bf6ee1646b0166cbf5616fc704943e622c9d0e3df12f2474b18119f5b8e3a5eacd3cced1c2b4997c784477317280a3180805969c63ad7496d700063e496fbd13ff74917e07ae24a70702985b460f64", @generic="8709cc2d55990dfeb2079587d1cd79b72d005aa2c000fa32ecf329958a5d49db3a33226832dbd1ba614c0d1f6cbb3cf5c7be1e9a926a40556dd22ee6bf05d5513ca7c7c9ae55385e886a9a2754b0fed0ef30c8b955d55b7709eb74c7aaca36dcd40d809586763840113a64f5c46cf9ff0b4d75b146d0093fd2bdf2635420ef09bb67c3a7fc551bd77bc2b1241aa69cb6007d1e7c7059", @generic="60bcf3549dca221a0de8819062a826879a59e4e260a2770246afb50d9f2ab5cdccc4fd0d70f6b67bcc068328eefc29a89afaf6caa594b38bf21e34139db1326b30c83803c14177b579a1e86475e4ef470fe5a5b87edec656801e47bcf0c72a73ad8368ed4f52908d16ce2e0831e1ee819827d79fa27d71ec085202101eab61a0e8957cd68dceba92ecfd2fe4d4e9b248b2bedf2a0b2fda8d8c7d12971c9cd8d9c3bf7b899f9978ab8bd8550d1f5a192b5b00061db2155991a02b73670faa2964bcd876376ef5d619e6388438a1f8c50105", @typed={0x10, 0x0, 0x0, 0x0, @str='\'-{/\xd3{*\\.\xa5\xa7\x00'}, @generic="eb98609d87", @generic="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"]}]}, 0x7f8}}, 0x0)

13:00:57 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x2, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000180), 0x4}, 0x0, 0x4, 0xfffffffd, 0x6, 0x0, 0x0, 0x101, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab', 0x0, 0x0)
getdents64(r1, &(0x7f0000000240)=""/217, 0xd9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa9}}, 0x14)
r3 = syz_open_dev$loop(0x0, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000380)={r3, 0x0, 0x1, 0x400})
r5 = gettid()
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x9, 0x1, 0xfe, 0x8, 0x0, 0x7fff, 0x44030, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x0, 0x2}, 0x290, 0x9, 0x8, 0x9, 0x3f, 0x7, 0x6, 0x0, 0x0, 0x0, 0x7}, r5, 0x3, r0, 0x0)
socket$inet6(0xa, 0x3, 0x5)

13:00:57 executing program 7:
syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[], 0x0, 0x0)

13:00:57 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_int(r0, 0x0, 0x17, 0x0, &(0x7f0000000100))

13:00:57 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
eventfd2(0x5, 0x80000)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x3, 0x7fff}, {0x5, 0x8000}, {0x4, 0x7d}, {0x7}, {0xc, 0x1}, {0x3, 0x200}, {0x81, 0x9}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080))
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
dup(0xffffffffffffffff)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x119)

13:00:57 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
eventfd2(0x5, 0x80000)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x3, 0x7fff}, {0x5, 0x8000}, {0x4, 0x7d}, {0x7}, {0xc, 0x1}, {0x3, 0x200}, {0x81, 0x9}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080))
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
dup(0xffffffffffffffff)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x119)

[  206.504667] process 'syz-executor.1' launched './file1' with NULL argv: empty string added
13:00:57 executing program 5:
creat(&(0x7f0000001a00)='./file0\x00', 0x0)
stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0x0, r0, 0x0)
setresuid(0xffffffffffffffff, 0x0, 0x0)

13:00:57 executing program 7:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x2, &(0x7f0000000000), 0x4)

13:00:57 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0xf)
sendmsg$nl_netfilter(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000080)={0x7f8, 0x0, 0x9, 0x401, 0x0, 0x0, {}, [@nested={0x14d, 0x0, 0x0, 0x1, [@generic="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", @generic="71b94f468e4401da4aecd361b53f504aa45ad6814d51e3f1c7ff6fc19486b0709ccd11778a89f944899587f864feb9ed7f806b3140b2b9ced6d8", @typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x691, 0x0, 0x0, 0x1, [@generic="1469325ff781b5dadb9b5a1608dcbced369dd5b1774acfe08264886f49f852fb3bf2f1e9fd04e732acb1f60ceba21726873034472b33f235663187eee3e143e3793d81ea16d37f1f", @typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @generic="3e9119844f275a0d3ae77effcb908f3e752d56814935e3c81154a2358ee74fbb0141dbbefcd54214e8b815c6cbb69580d290b1514aef2ee9c0071f62736e6a33dd3bb6c31936728defd9d6ee2ed837f31083406383ac9d6054f106336ddb0f1944d849f607bc7f4c236a8afc07f7f0677ff3dab9d95b4217fb119b651c75aeb1c6e3d4aebe088a151d87898ce88487ff59", @generic="3f94a3d7d8fafd5a43397346f6eb3e24cdddf6794ffef5463e98f5291b3faabc0a45f65c2341de08fac4f428dcfe1beb9b09732903d0a59a313b43026ced0780ee878c2e9fb97cc149ca004e0f9689972844b51972693a3d7ac12fc703040bc4a22b0a51d5230e1501dd3eee93fdb662126437c4e4cfc015dac344bf6ee1646b0166cbf5616fc704943e622c9d0e3df12f2474b18119f5b8e3a5eacd3cced1c2b4997c784477317280a3180805969c63ad7496d700063e496fbd13ff74917e07ae24a70702985b460f64", @generic="8709cc2d55990dfeb2079587d1cd79b72d005aa2c000fa32ecf329958a5d49db3a33226832dbd1ba614c0d1f6cbb3cf5c7be1e9a926a40556dd22ee6bf05d5513ca7c7c9ae55385e886a9a2754b0fed0ef30c8b955d55b7709eb74c7aaca36dcd40d809586763840113a64f5c46cf9ff0b4d75b146d0093fd2bdf2635420ef09bb67c3a7fc551bd77bc2b1241aa69cb6007d1e7c7059", @generic="60bcf3549dca221a0de8819062a826879a59e4e260a2770246afb50d9f2ab5cdccc4fd0d70f6b67bcc068328eefc29a89afaf6caa594b38bf21e34139db1326b30c83803c14177b579a1e86475e4ef470fe5a5b87edec656801e47bcf0c72a73ad8368ed4f52908d16ce2e0831e1ee819827d79fa27d71ec085202101eab61a0e8957cd68dceba92ecfd2fe4d4e9b248b2bedf2a0b2fda8d8c7d12971c9cd8d9c3bf7b899f9978ab8bd8550d1f5a192b5b00061db2155991a02b73670faa2964bcd876376ef5d619e6388438a1f8c50105", @typed={0x10, 0x0, 0x0, 0x0, @str='\'-{/\xd3{*\\.\xa5\xa7\x00'}, @generic="eb98609d87", @generic="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"]}]}, 0x7f8}}, 0x0)

13:00:57 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x18, 0x0, 0x0)

13:00:58 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x1000, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1800, 0x0)

13:00:58 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000), 0xe)

13:00:58 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0xf)
sendmsg$nl_netfilter(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000080)={0x7f8, 0x0, 0x9, 0x401, 0x0, 0x0, {}, [@nested={0x14d, 0x0, 0x0, 0x1, [@generic="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", @generic="71b94f468e4401da4aecd361b53f504aa45ad6814d51e3f1c7ff6fc19486b0709ccd11778a89f944899587f864feb9ed7f806b3140b2b9ced6d8", @typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x691, 0x0, 0x0, 0x1, [@generic="1469325ff781b5dadb9b5a1608dcbced369dd5b1774acfe08264886f49f852fb3bf2f1e9fd04e732acb1f60ceba21726873034472b33f235663187eee3e143e3793d81ea16d37f1f", @typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @generic="3e9119844f275a0d3ae77effcb908f3e752d56814935e3c81154a2358ee74fbb0141dbbefcd54214e8b815c6cbb69580d290b1514aef2ee9c0071f62736e6a33dd3bb6c31936728defd9d6ee2ed837f31083406383ac9d6054f106336ddb0f1944d849f607bc7f4c236a8afc07f7f0677ff3dab9d95b4217fb119b651c75aeb1c6e3d4aebe088a151d87898ce88487ff59", @generic="3f94a3d7d8fafd5a43397346f6eb3e24cdddf6794ffef5463e98f5291b3faabc0a45f65c2341de08fac4f428dcfe1beb9b09732903d0a59a313b43026ced0780ee878c2e9fb97cc149ca004e0f9689972844b51972693a3d7ac12fc703040bc4a22b0a51d5230e1501dd3eee93fdb662126437c4e4cfc015dac344bf6ee1646b0166cbf5616fc704943e622c9d0e3df12f2474b18119f5b8e3a5eacd3cced1c2b4997c784477317280a3180805969c63ad7496d700063e496fbd13ff74917e07ae24a70702985b460f64", @generic="8709cc2d55990dfeb2079587d1cd79b72d005aa2c000fa32ecf329958a5d49db3a33226832dbd1ba614c0d1f6cbb3cf5c7be1e9a926a40556dd22ee6bf05d5513ca7c7c9ae55385e886a9a2754b0fed0ef30c8b955d55b7709eb74c7aaca36dcd40d809586763840113a64f5c46cf9ff0b4d75b146d0093fd2bdf2635420ef09bb67c3a7fc551bd77bc2b1241aa69cb6007d1e7c7059", @generic="60bcf3549dca221a0de8819062a826879a59e4e260a2770246afb50d9f2ab5cdccc4fd0d70f6b67bcc068328eefc29a89afaf6caa594b38bf21e34139db1326b30c83803c14177b579a1e86475e4ef470fe5a5b87edec656801e47bcf0c72a73ad8368ed4f52908d16ce2e0831e1ee819827d79fa27d71ec085202101eab61a0e8957cd68dceba92ecfd2fe4d4e9b248b2bedf2a0b2fda8d8c7d12971c9cd8d9c3bf7b899f9978ab8bd8550d1f5a192b5b00061db2155991a02b73670faa2964bcd876376ef5d619e6388438a1f8c50105", @typed={0x10, 0x0, 0x0, 0x0, @str='\'-{/\xd3{*\\.\xa5\xa7\x00'}, @generic="eb98609d87", @generic="fb73e9a81c41189f55e87eb909ccd7182d77ed85e9048f951ed90a3ca193eee2b82837a3fb5b68fe00410fdce3bdfbbb8e10568db5a66ae3c5f718b42a3d231a63e92d101a6da8aa8a67cbc446827a1cccf2b64b08fd5d11c3e4a711db7db992827f80d496ea898747acacbd34f5f91735fafd9350b6862c6539cb3f8caedd387776c19fc55658cb3a66a3c99c8c54a097ac5d1961e3bb3361f83310c577f139f2a86e1ca21722337d8f89132af7b339fcfc1521f275716b640e61489d625ecd810d740d5c30f943aa43b02522d77489f88532d3e5b82b9a7dc802ed845cd9f619b8a957d396ea96c395e06bf99bf2559de87cb15a62f745647bc0a5b64dd04f56ad8331b6816ffd599b96318db8bcde9fd1ce61b107b6e0491f1f5a8e174d6c9ea4b02e96246885598ad20a48ee089f2988317775b84dcb53203018984b80a3b7e32c2d0977578ffe6b93cfb5a85b9f8abc0879e17b299bff2831eddf546bfbad2f9bdcd3a25741f323871e14222c6ea021a936a263ae8794b8a2633900fb7d4023f6263bebb17df60ace7fca7ecd124c1427f40af51f90cefba81b7f162d3c050c904c6171c960ebe0d6fa66469538f5e26f98904f9a8a20cce21aa140c5e1412ede04a38a9d480b078cd235a6b560dda0b8d5ae44c6751a37116bb70ed4a46ecd6fe41b97760ac588f8dc7b11daeb8e3654823197566620622e581784734763bd4296dcb662fd6317911937567843b66557ad96725ae535c7916c4a73f0411641ca9363b7fa22985b6949111cfe2a453c16f90a0e7b4229cfbcafdd02fa86db8576c140d45ec4b5a799d6211ef2d8ee8b114302df7d42275f081bc3daf35712746524bbfa1a7f847de13bbab66c99739ab484e06338751bfe6029b20304e496d7c4a4910a62afc8a494862035bc8a8d96b1accda6cf76740fbff9bced9830fc79254262b39fa9f899c0ef9df932fa2fbb58984abe828c4593f2b1781fd917b776b7058319d7e237cd8a160f9b57fbdc3fc12ebb29b60382d746188113de2cd79f3f7d2c070f00dcbe01aef80caf6b50cbe6d0c8d7cad803f998be536c4acd93fc52f69953cad3f5a9765850cabe6f4478df340c4e22c70cc45f2e7c9624fa502a72b4dd8fb60428e5edb344bffce9c64915af4c8e5278ea9a49eea5eb1318e2ee93ea90f4a53ed7093ab64ad058986e5837d0233719c23f75"]}]}, 0x7f8}}, 0x0)

13:00:58 executing program 7:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r0}], 0x1, 0xffff)
vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
write$P9_RMKDIR(r1, &(0x7f0000000000)={0x14}, 0x14)
fcntl$setpipe(r0, 0x407, 0x10001)

13:00:58 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x5, 0x3f, 0x0, 0x100000001, 0x10c4, 0xe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x43441, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

13:00:58 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x6, 0x0, 0x0)

13:00:58 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x18, 0x0, 0x0)

[  207.287179] loop1: detected capacity change from 0 to 40
13:00:58 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x18, 0x0, 0x0)

13:00:58 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x6, 0x0, 0x0)

13:00:58 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x18, 0x0, 0x0)

13:00:58 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x6, 0x0, 0x0)

13:00:58 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x6, 0x0, 0x0)

[  207.669444] syz-executor.1: attempt to access beyond end of device
[  207.669444] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[  207.722721] syz-executor.1: attempt to access beyond end of device
[  207.722721] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
13:00:58 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x5, 0x3f, 0x0, 0x100000001, 0x10c4, 0xe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x43441, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[  207.781155] loop1: detected capacity change from 0 to 40
[  207.937012] syz-executor.1: attempt to access beyond end of device
[  207.937012] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
13:00:59 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x5, 0x3f, 0x0, 0x100000001, 0x10c4, 0xe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x43441, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[  207.997536] loop1: detected capacity change from 0 to 40
13:00:59 executing program 7:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r0}], 0x1, 0xffff)
vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
write$P9_RMKDIR(r1, &(0x7f0000000000)={0x14}, 0x14)
fcntl$setpipe(r0, 0x407, 0x10001)

[  208.311764] syz-executor.1: attempt to access beyond end of device
[  208.311764] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
13:00:59 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x5, 0x3f, 0x0, 0x100000001, 0x10c4, 0xe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x43441, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

13:01:00 executing program 7:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r0}], 0x1, 0xffff)
vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
write$P9_RMKDIR(r1, &(0x7f0000000000)={0x14}, 0x14)
fcntl$setpipe(r0, 0x407, 0x10001)

13:01:00 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r0}], 0x1, 0xffff)
vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
write$P9_RMKDIR(r1, &(0x7f0000000000)={0x14}, 0x14)
fcntl$setpipe(r0, 0x407, 0x10001)

13:01:00 executing program 6:
syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff)

13:01:00 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r0, 0x0, 0x0, 0x87ffffc)
readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x40200)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = getpid()
rt_tgsigqueueinfo(r2, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6})
openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0)
syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00')
r3 = dup3(r1, 0xffffffffffffffff, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="00000000000004070009088c43f9161fa7848acb59000000000000000500000808000340000000020c00048e0800014000000003ff8dfd4aa2897a7a857633966d16d674a891b59e7094d254a487487383b29f8f94737624d8b3b939149ab765799e5604573033b3abca9652fe502cff198e84ff94d47ba6328e8e2fa79295c348"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x880)

13:01:00 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000), 0x4)

13:01:00 executing program 2:
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000100)=""/129)

13:01:00 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
preadv2(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/97, 0x61}], 0x1, 0x70e, 0x7, 0x8)
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x725a, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@auto_da_alloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@jqfmt_vfsv0}, {@sb={'sb', 0x3d, 0x6}}, {@nomblk_io_submit}], [{@euid_gt}]})
syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x4, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="7cb63b42772540994d", 0x9, 0x8}], 0x0, &(0x7f0000000400)={[{@journal_dev={'journal_dev', 0x3d, 0x5}}, {@errors_continue}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x50}}, {@nogrpid}, {@delalloc}], [{@subj_role={'subj_role', 0x3d, 'jqfmt=vfsv0'}}, {@appraise}, {@obj_type={'obj_type', 0x3d, 'auto_da_alloc'}}, {@fowner_gt={'fowner>', 0xee00}}, {@dont_measure}, {@subj_user={'subj_user', 0x3d, 'journal_ioprio'}}]})

13:01:00 executing program 2:
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}}}, 0xc)

13:01:00 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xb0811, r0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x100011, r0, 0x8000000)
syz_io_uring_setup(0x1e58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0)
syz_io_uring_setup(0x61d1, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x3e5b, &(0x7f0000000100), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))

13:01:00 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000), 0x4)

[  209.365809] EXT4-fs: Ignoring removed nomblk_io_submit option
[  209.366687] ext4: Unknown parameter 'euid>00000000000000000000'
[  209.388028] ext2: Unknown parameter 'subj_role'
13:01:01 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r0}], 0x1, 0xffff)
vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
write$P9_RMKDIR(r1, &(0x7f0000000000)={0x14}, 0x14)
fcntl$setpipe(r0, 0x407, 0x10001)

13:01:01 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000), 0x4)

13:01:01 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_config_ext, 0x13002, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
getuid()
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r1}, 0x18, 0x0)
pwrite64(r0, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c670541bfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a", 0x31, 0x8)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

13:01:01 executing program 6:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040), &(0x7f00000000c0)={0x0, 0xfb, 0xf6, 0x5, 0x9, "d2a149fd4415c7eb677a5b4636793d2e", "84784878199988e83ac2b08aacac3433328173d0861b22ed067b49bb67940306ca116fdad3c5faa346e20775406e86c9e10af6588da9448ac2effbf9c314da3d416e4b182461ba029338c85552d9e6e5595de04ec055b23e82e644939271ed7aa51fd8f0563211f839595e195b929ecd8d3c9d473048271484cf4c2684e438dd446a0e1e6d086e7f63ae66680bf1eff6cb761cdad0ec32f30256c01fbd7f8ad9b774c70177f2b59747f5584ddf99f9a91c9ddc815dfc147c7b50d0001f826823a2ae3d125fa668d015c73b1cbbe0d4017f14140bd63714baccd9e6f764a4105e7e"}, 0xf6, 0x2)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x1015, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000200), &(0x7f0000000240)=0x30)
dup2(r1, r0)
r3 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f00000018c0)={0x2, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x17)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000001c0)={'veth1_virt_wifi\x00', {0x2, 0x0, @initdev}})
socket$inet_udp(0x2, 0x2, 0x0)

13:01:01 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
preadv2(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/97, 0x61}], 0x1, 0x70e, 0x7, 0x8)
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x725a, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@auto_da_alloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@jqfmt_vfsv0}, {@sb={'sb', 0x3d, 0x6}}, {@nomblk_io_submit}], [{@euid_gt}]})
syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x4, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="7cb63b42772540994d", 0x9, 0x8}], 0x0, &(0x7f0000000400)={[{@journal_dev={'journal_dev', 0x3d, 0x5}}, {@errors_continue}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x50}}, {@nogrpid}, {@delalloc}], [{@subj_role={'subj_role', 0x3d, 'jqfmt=vfsv0'}}, {@appraise}, {@obj_type={'obj_type', 0x3d, 'auto_da_alloc'}}, {@fowner_gt={'fowner>', 0xee00}}, {@dont_measure}, {@subj_user={'subj_user', 0x3d, 'journal_ioprio'}}]})

13:01:01 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r0, 0x0, 0x0, 0x87ffffc)
readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x40200)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = getpid()
rt_tgsigqueueinfo(r2, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6})
openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0)
syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00')
r3 = dup3(r1, 0xffffffffffffffff, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="00000000000004070009088c43f9161fa7848acb59000000000000000500000808000340000000020c00048e0800014000000003ff8dfd4aa2897a7a857633966d16d674a891b59e7094d254a487487383b29f8f94737624d8b3b939149ab765799e5604573033b3abca9652fe502cff198e84ff94d47ba6328e8e2fa79295c348"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x880)

13:01:01 executing program 7:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r0}], 0x1, 0xffff)
vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
write$P9_RMKDIR(r1, &(0x7f0000000000)={0x14}, 0x14)
fcntl$setpipe(r0, 0x407, 0x10001)

13:01:01 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000), 0x4)

[  210.372891] EXT4-fs: Ignoring removed nomblk_io_submit option
[  210.373491] ext4: Unknown parameter 'euid>00000000000000000000'
[  210.381098] ext2: Unknown parameter 'subj_role'
13:01:01 executing program 4:
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0)
syz_io_uring_setup(0x2be7, &(0x7f00000003c0)={0x0, 0x0, 0x1}, &(0x7f0000daa000/0x3000)=nil, &(0x7f0000f4e000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480))

13:01:01 executing program 1:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil)
r1 = shmget(0x0, 0x1000, 0x20, &(0x7f0000ffb000/0x1000)=nil)
shmctl$IPC_RMID(r1, 0x0)
shmat(0x0, &(0x7f0000fe9000/0x3000)=nil, 0x2000)
shmctl$IPC_RMID(0x0, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
shmat(0x0, &(0x7f0000feb000/0x3000)=nil, 0x0)
shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x4)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x149, 0x7}, 0x10601, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x1, 0x8a, 0x30, 0xa9, 0x0, 0x5, 0x8, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_bp={&(0x7f0000000340), 0x2}, 0x3a00, 0x7, 0x80000000, 0x4, 0x0, 0x6, 0x3c3c, 0x0, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat2(r3, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)

[  211.138257] BUG: unable to handle page fault for address: ffffed100fffc000
[  211.138791] #PF: supervisor write access in kernel mode
[  211.139144] #PF: error_code(0x0002) - not-present page
[  211.139490] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0
[  211.139937] Oops: 0002 [#1] PREEMPT SMP KASAN NOPTI
[  211.140266] CPU: 1 PID: 7172 Comm: syz-executor.1 Not tainted 6.1.0-rc3-next-20221031 #1
[  211.140788] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  211.141658] RIP: 0010:__memset+0x24/0x50
[  211.142978] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  211.146030] RSP: 0018:ffff888030bcfcc0 EFLAGS: 00010212
[  211.146420] RAX: 0000000000000000 RBX: ffff88800c02d0c0 RCX: 1ffffe21fe602183
[  211.146942] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  211.147453] RBP: ffff88800c039000 R08: 0000000000000005 R09: ffffed1001805a18
[  211.147964] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c039000
[  211.148474] R13: ffff88800c02d0c0 R14: ffffffff815f27a0 R15: 1ffff1100112361f
[  211.148987] FS:  00007fa5e05e1700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000
[  211.149552] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  211.149971] CR2: ffffed100fffc000 CR3: 0000000019d0e000 CR4: 0000000000350ee0
[  211.150466] Call Trace:
[  211.150685]  <TASK>
[  211.150839]  kasan_unpoison+0x23/0x60
[  211.151104]  mempool_exit+0x1c2/0x330
[  211.151371]  bioset_exit+0x2c9/0x630
[  211.151677]  disk_release+0x143/0x490
[  211.152047]  ? disk_release+0x0/0x490
[  211.152422]  ? device_release+0x0/0x250
[  211.152801]  device_release+0xa2/0x250
[  211.153184]  ? device_release+0x0/0x250
[  211.153549]  kobject_put+0x173/0x280
[  211.153883]  put_device+0x1b/0x40
[  211.154221]  put_disk+0x41/0x60
[  211.154556]  loop_control_ioctl+0x4d1/0x630
[  211.154981]  ? loop_control_ioctl+0x0/0x630
[  211.155388]  ? selinux_file_ioctl+0xb1/0x270
[  211.155830]  ? loop_control_ioctl+0x0/0x630
[  211.156241]  __x64_sys_ioctl+0x19a/0x220
[  211.156640]  do_syscall_64+0x3b/0xa0
[  211.157001]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[  211.157491] RIP: 0033:0x7fa5e306bb19
[  211.157845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  211.159519] RSP: 002b:00007fa5e05e1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  211.160033] RAX: ffffffffffffffda RBX: 00007fa5e317ef60 RCX: 00007fa5e306bb19
[  211.160501] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000006
[  211.160966] RBP: 00007fa5e30c5f6d R08: 0000000000000000 R09: 0000000000000000
[  211.161424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  211.161886] R13: 00007fff85601acf R14: 00007fa5e05e1300 R15: 0000000000022000
[  211.162361]  </TASK>
[  211.162519] Modules linked in:
[  211.162750] CR2: ffffed100fffc000
[  211.162979] ---[ end trace 0000000000000000 ]---
[  211.163293] RIP: 0010:__memset+0x24/0x50
[  211.163576] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  211.164732] RSP: 0018:ffff888030bcfcc0 EFLAGS: 00010212
[  211.165088] RAX: 0000000000000000 RBX: ffff88800c02d0c0 RCX: 1ffffe21fe602183
[  211.165556] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  211.166016] RBP: ffff88800c039000 R08: 0000000000000005 R09: ffffed1001805a18
[  211.166479] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c039000
[  211.166966] R13: ffff88800c02d0c0 R14: ffffffff815f27a0 R15: 1ffff1100112361f
[  211.167433] FS:  00007fa5e05e1700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000
[  211.167953] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  211.168339] CR2: ffffed100fffc000 CR3: 0000000019d0e000 CR4: 0000000000350ee0
[  211.432208] BUG: unable to handle page fault for address: ffffed100fffc000
[  211.432812] #PF: supervisor write access in kernel mode
[  211.433236] #PF: error_code(0x0002) - not-present page
[  211.433654] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0
[  211.434075] Oops: 0002 [#2] PREEMPT SMP KASAN NOPTI
[  211.434400] CPU: 1 PID: 7177 Comm: syz-executor.1 Tainted: G      D            6.1.0-rc3-next-20221031 #1
[  211.434979] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  211.435489] RIP: 0010:__memset+0x24/0x50
[  211.435758] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  211.436861] RSP: 0018:ffff8880444f7cc0 EFLAGS: 00010212
[  211.437187] RAX: 0000000000000000 RBX: ffff88800c02d240 RCX: 1ffffe21fe602189
[  211.437636] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  211.438075] RBP: ffff88800c039000 R08: 0000000000000005 R09: ffffed1001805a48
[  211.438514] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c039000
[  211.438979] R13: ffff88800c02d240 R14: ffffffff815f27a0 R15: 1ffff1100112321f
[  211.439416] FS:  00007fa5e05c0700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000
[  211.439920] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  211.440288] CR2: ffffed100fffc000 CR3: 0000000019d0e000 CR4: 0000000000350ee0
[  211.440741] Call Trace:
[  211.440923]  <TASK>
[  211.441068]  kasan_unpoison+0x23/0x60
[  211.441317]  mempool_exit+0x1c2/0x330
[  211.441569]  bioset_exit+0x2c9/0x630
[  211.441818]  disk_release+0x143/0x490
[  211.442075]  ? disk_release+0x0/0x490
[  211.442329]  ? device_release+0x0/0x250
[  211.442588]  device_release+0xa2/0x250
[  211.442836]  ? device_release+0x0/0x250
[  211.443103]  kobject_put+0x173/0x280
[  211.443351]  put_device+0x1b/0x40
[  211.443576]  put_disk+0x41/0x60
[  211.443793]  loop_control_ioctl+0x4d1/0x630
[  211.444086]  ? loop_control_ioctl+0x0/0x630
[  211.444363]  ? selinux_file_ioctl+0xb1/0x270
[  211.444654]  ? loop_control_ioctl+0x0/0x630
[  211.444932]  __x64_sys_ioctl+0x19a/0x220
[  211.445213]  do_syscall_64+0x3b/0xa0
[  211.445460]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[  211.445781] RIP: 0033:0x7fa5e306bb19
[  211.446016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  211.447129] RSP: 002b:00007fa5e05c0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  211.447603] RAX: ffffffffffffffda RBX: 00007fa5e317f020 RCX: 00007fa5e306bb19
[  211.448040] RDX: 0000000000000001 RSI: 0000000000004c81 RDI: 0000000000000006
[  211.448483] RBP: 00007fa5e30c5f6d R08: 0000000000000000 R09: 0000000000000000
[  211.448918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  211.449349] R13: 00007fff85601acf R14: 00007fa5e05c0300 R15: 0000000000022000
[  211.449801]  </TASK>
[  211.449950] Modules linked in:
[  211.450156] CR2: ffffed100fffc000
[  211.450371] ---[ end trace 0000000000000000 ]---
[  211.450746] RIP: 0010:__memset+0x24/0x50
[  211.451094] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  211.452492] RSP: 0018:ffff888030bcfcc0 EFLAGS: 00010212
[  211.452919] RAX: 0000000000000000 RBX: ffff88800c02d0c0 RCX: 1ffffe21fe602183
[  211.453486] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  211.453934] RBP: ffff88800c039000 R08: 0000000000000005 R09: ffffed1001805a18
[  211.454363] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c039000
[  211.454813] R13: ffff88800c02d0c0 R14: ffffffff815f27a0 R15: 1ffff1100112361f
[  211.455259] FS:  00007fa5e05c0700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000
[  211.455750] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  211.456119] CR2: ffffed100fffc000 CR3: 0000000019d0e000 CR4: 0000000000350ee0
13:01:02 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r0, 0x0, 0x0, 0x87ffffc)
readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x40200)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = getpid()
rt_tgsigqueueinfo(r2, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6})
openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0)
syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00')
r3 = dup3(r1, 0xffffffffffffffff, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="00000000000004070009088c43f9161fa7848acb59000000000000000500000808000340000000020c00048e0800014000000003ff8dfd4aa2897a7a857633966d16d674a891b59e7094d254a487487383b29f8f94737624d8b3b939149ab765799e5604573033b3abca9652fe502cff198e84ff94d47ba6328e8e2fa79295c348"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x880)

13:01:02 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_config_ext, 0x13002, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
getuid()
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r1}, 0x18, 0x0)
pwrite64(r0, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c670541bfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a", 0x31, 0x8)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

13:01:02 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
preadv2(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/97, 0x61}], 0x1, 0x70e, 0x7, 0x8)
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x725a, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@auto_da_alloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@jqfmt_vfsv0}, {@sb={'sb', 0x3d, 0x6}}, {@nomblk_io_submit}], [{@euid_gt}]})
syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x4, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="7cb63b42772540994d", 0x9, 0x8}], 0x0, &(0x7f0000000400)={[{@journal_dev={'journal_dev', 0x3d, 0x5}}, {@errors_continue}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x50}}, {@nogrpid}, {@delalloc}], [{@subj_role={'subj_role', 0x3d, 'jqfmt=vfsv0'}}, {@appraise}, {@obj_type={'obj_type', 0x3d, 'auto_da_alloc'}}, {@fowner_gt={'fowner>', 0xee00}}, {@dont_measure}, {@subj_user={'subj_user', 0x3d, 'journal_ioprio'}}]})

13:01:02 executing program 7:
syz_emit_ethernet(0x2a, &(0x7f0000000180)={@empty, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0)

13:01:02 executing program 1:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil)
r1 = shmget(0x0, 0x1000, 0x20, &(0x7f0000ffb000/0x1000)=nil)
shmctl$IPC_RMID(r1, 0x0)
shmat(0x0, &(0x7f0000fe9000/0x3000)=nil, 0x2000)
shmctl$IPC_RMID(0x0, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
shmat(0x0, &(0x7f0000feb000/0x3000)=nil, 0x0)
shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x4)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x149, 0x7}, 0x10601, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x1, 0x8a, 0x30, 0xa9, 0x0, 0x5, 0x8, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_bp={&(0x7f0000000340), 0x2}, 0x3a00, 0x7, 0x80000000, 0x4, 0x0, 0x6, 0x3c3c, 0x0, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat2(r3, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)

13:01:02 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r0}], 0x1, 0xffff)
vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0)
write$P9_RMKDIR(r1, &(0x7f0000000000)={0x14}, 0x14)
fcntl$setpipe(r0, 0x407, 0x10001)

13:01:02 executing program 4:
openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0)

13:01:02 executing program 6:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040), &(0x7f00000000c0)={0x0, 0xfb, 0xf6, 0x5, 0x9, "d2a149fd4415c7eb677a5b4636793d2e", "84784878199988e83ac2b08aacac3433328173d0861b22ed067b49bb67940306ca116fdad3c5faa346e20775406e86c9e10af6588da9448ac2effbf9c314da3d416e4b182461ba029338c85552d9e6e5595de04ec055b23e82e644939271ed7aa51fd8f0563211f839595e195b929ecd8d3c9d473048271484cf4c2684e438dd446a0e1e6d086e7f63ae66680bf1eff6cb761cdad0ec32f30256c01fbd7f8ad9b774c70177f2b59747f5584ddf99f9a91c9ddc815dfc147c7b50d0001f826823a2ae3d125fa668d015c73b1cbbe0d4017f14140bd63714baccd9e6f764a4105e7e"}, 0xf6, 0x2)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x1015, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000200), &(0x7f0000000240)=0x30)
dup2(r1, r0)
r3 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f00000018c0)={0x2, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x17)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000001c0)={'veth1_virt_wifi\x00', {0x2, 0x0, @initdev}})
socket$inet_udp(0x2, 0x2, 0x0)

13:01:02 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x22, 0x4f1, 0x1000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x3e, 0x101, 0x0, 0x0, "", [@nested={0xa}]}, 0x14}], 0x1}, 0x0)
pread64(r1, &(0x7f0000000100)=""/223, 0xdf, 0x10001)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq}, {@measure}]}})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x404000, 0x140)
ioctl$KDGKBTYPE(r3, 0x4b4c, &(0x7f0000000080))
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGKBTYPE(r4, 0x4b4c, &(0x7f0000000080))
syz_open_dev$tty20(0xc, 0x4, 0x0)

[  211.705111] BUG: unable to handle page fault for address: ffffed100fffc000
[  211.705625] #PF: supervisor write access in kernel mode
[  211.705995] #PF: error_code(0x0002) - not-present page
[  211.706344] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0
[  211.706804] Oops: 0002 [#3] PREEMPT SMP KASAN NOPTI
[  211.707216] CPU: 1 PID: 7187 Comm: syz-executor.1 Tainted: G      D            6.1.0-rc3-next-20221031 #1
[  211.707984] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  211.708657] RIP: 0010:__memset+0x24/0x50
[  211.709018] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  211.710500] RSP: 0018:ffff8880440d7cc0 EFLAGS: 00010212
[  211.710939] RAX: 0000000000000000 RBX: ffff88800c02d3c0 RCX: 1ffffe21fe60218f
[  211.711519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  211.712022] RBP: ffff88800c039000 R08: 0000000000000005 R09: ffffed1001805a78
[  211.712496] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c039000
[  211.712967] R13: ffff88800c02d3c0 R14: ffffffff815f27a0 R15: 1ffff110010e5c1f
[  211.713436] FS:  00007fa5e05e1700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000
[  211.713967] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  211.714356] CR2: ffffed100fffc000 CR3: 000000004159a000 CR4: 0000000000350ee0
[  211.714835] Call Trace:
[  211.715016]  <TASK>
[  211.715175]  kasan_unpoison+0x23/0x60
[  211.715448]  mempool_exit+0x1c2/0x330
[  211.715722]  bioset_exit+0x2c9/0x630
[  211.715989]  disk_release+0x143/0x490
[  211.716264]  ? disk_release+0x0/0x490
[  211.716531]  ? device_release+0x0/0x250
[  211.716803]  device_release+0xa2/0x250
[  211.717069]  ? device_release+0x0/0x250
[  211.717338]  kobject_put+0x173/0x280
[  211.717601]  put_device+0x1b/0x40
[  211.717841]  put_disk+0x41/0x60
[  211.718077]  loop_control_ioctl+0x4d1/0x630
[  211.718380]  ? loop_control_ioctl+0x0/0x630
[  211.718683]  ? selinux_file_ioctl+0xb1/0x270
[  211.718995]  ? loop_control_ioctl+0x0/0x630
[  211.719292]  __x64_sys_ioctl+0x19a/0x220
[  211.719576]  do_syscall_64+0x3b/0xa0
[  211.719847]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[  211.720201] RIP: 0033:0x7fa5e306bb19
[  211.720456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  211.721619] RSP: 002b:00007fa5e05e1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  211.722114] RAX: ffffffffffffffda RBX: 00007fa5e317ef60 RCX: 00007fa5e306bb19
[  211.722594] RDX: 0000000000000002 RSI: 0000000000004c81 RDI: 0000000000000006
[  211.723063] RBP: 00007fa5e30c5f6d R08: 0000000000000000 R09: 0000000000000000
[  211.723522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  211.723986] R13: 00007fff85601acf R14: 00007fa5e05e1300 R15: 0000000000022000
[  211.724465]  </TASK>
[  211.724626] Modules linked in:
[  211.724850] CR2: ffffed100fffc000
[  211.725085] ---[ end trace 0000000000000000 ]---
[  211.725400] RIP: 0010:__memset+0x24/0x50
[  211.725691] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  211.726859] RSP: 0018:ffff888030bcfcc0 EFLAGS: 00010212
[  211.727213] RAX: 0000000000000000 RBX: ffff88800c02d0c0 RCX: 1ffffe21fe602183
[  211.727677] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  211.728140] RBP: ffff88800c039000 R08: 0000000000000005 R09: ffffed1001805a18
[  211.728608] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c039000
[  211.729074] R13: ffff88800c02d0c0 R14: ffffffff815f27a0 R15: 1ffff1100112361f
[  211.729545] FS:  00007fa5e05e1700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000
[  211.730068] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  211.730455] CR2: ffffed100fffc000 CR3: 000000004159a000 CR4: 0000000000350ee0
13:01:02 executing program 7:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r3, 0x0, r4)
ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
sendfile(r2, r4, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

[  211.817217] loop7: detected capacity change from 0 to 40
13:01:02 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x22, 0x4f1, 0x1000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x3e, 0x101, 0x0, 0x0, "", [@nested={0xa}]}, 0x14}], 0x1}, 0x0)
pread64(r1, &(0x7f0000000100)=""/223, 0xdf, 0x10001)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq}, {@measure}]}})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x404000, 0x140)
ioctl$KDGKBTYPE(r3, 0x4b4c, &(0x7f0000000080))
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGKBTYPE(r4, 0x4b4c, &(0x7f0000000080))
syz_open_dev$tty20(0xc, 0x4, 0x0)

13:01:03 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_config_ext, 0x13002, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
getuid()
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r1}, 0x18, 0x0)
pwrite64(r0, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c670541bfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a", 0x31, 0x8)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

13:01:03 executing program 6:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040), &(0x7f00000000c0)={0x0, 0xfb, 0xf6, 0x5, 0x9, "d2a149fd4415c7eb677a5b4636793d2e", "84784878199988e83ac2b08aacac3433328173d0861b22ed067b49bb67940306ca116fdad3c5faa346e20775406e86c9e10af6588da9448ac2effbf9c314da3d416e4b182461ba029338c85552d9e6e5595de04ec055b23e82e644939271ed7aa51fd8f0563211f839595e195b929ecd8d3c9d473048271484cf4c2684e438dd446a0e1e6d086e7f63ae66680bf1eff6cb761cdad0ec32f30256c01fbd7f8ad9b774c70177f2b59747f5584ddf99f9a91c9ddc815dfc147c7b50d0001f826823a2ae3d125fa668d015c73b1cbbe0d4017f14140bd63714baccd9e6f764a4105e7e"}, 0xf6, 0x2)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x1015, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000200), &(0x7f0000000240)=0x30)
dup2(r1, r0)
r3 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f00000018c0)={0x2, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x17)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000001c0)={'veth1_virt_wifi\x00', {0x2, 0x0, @initdev}})
socket$inet_udp(0x2, 0x2, 0x0)

13:01:03 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r0, 0x0, 0x0, 0x87ffffc)
readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x40200)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = getpid()
rt_tgsigqueueinfo(r2, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6})
openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0)
syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00')
r3 = dup3(r1, 0xffffffffffffffff, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="00000000000004070009088c43f9161fa7848acb59000000000000000500000808000340000000020c00048e0800014000000003ff8dfd4aa2897a7a857633966d16d674a891b59e7094d254a487487383b29f8f94737624d8b3b939149ab765799e5604573033b3abca9652fe502cff198e84ff94d47ba6328e8e2fa79295c348"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x880)

[  211.975817] syz-executor.7: attempt to access beyond end of device
[  211.975817] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[  211.976703] buffer_io_error: 10 callbacks suppressed
[  211.976711] Buffer I/O error on dev loop7, logical block 10, lost async page write
[  211.984219] syz-executor.7: attempt to access beyond end of device
[  211.984219] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[  211.985083] Buffer I/O error on dev loop7, logical block 10, lost async page write
[  212.052044] syz-executor.7: attempt to access beyond end of device
[  212.052044] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[  212.053422] Buffer I/O error on dev loop7, logical block 10, lost async page write
[  212.278148] Bluetooth: hci3: command 0x0406 tx timeout
13:01:03 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_config_ext, 0x13002, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
getuid()
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r1}, 0x18, 0x0)
pwrite64(r0, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c670541bfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a", 0x31, 0x8)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

13:01:03 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
preadv2(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/97, 0x61}], 0x1, 0x70e, 0x7, 0x8)
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x725a, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@auto_da_alloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@jqfmt_vfsv0}, {@sb={'sb', 0x3d, 0x6}}, {@nomblk_io_submit}], [{@euid_gt}]})
syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x4, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="7cb63b42772540994d", 0x9, 0x8}], 0x0, &(0x7f0000000400)={[{@journal_dev={'journal_dev', 0x3d, 0x5}}, {@errors_continue}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x50}}, {@nogrpid}, {@delalloc}], [{@subj_role={'subj_role', 0x3d, 'jqfmt=vfsv0'}}, {@appraise}, {@obj_type={'obj_type', 0x3d, 'auto_da_alloc'}}, {@fowner_gt={'fowner>', 0xee00}}, {@dont_measure}, {@subj_user={'subj_user', 0x3d, 'journal_ioprio'}}]})

13:01:03 executing program 6:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040), &(0x7f00000000c0)={0x0, 0xfb, 0xf6, 0x5, 0x9, "d2a149fd4415c7eb677a5b4636793d2e", "84784878199988e83ac2b08aacac3433328173d0861b22ed067b49bb67940306ca116fdad3c5faa346e20775406e86c9e10af6588da9448ac2effbf9c314da3d416e4b182461ba029338c85552d9e6e5595de04ec055b23e82e644939271ed7aa51fd8f0563211f839595e195b929ecd8d3c9d473048271484cf4c2684e438dd446a0e1e6d086e7f63ae66680bf1eff6cb761cdad0ec32f30256c01fbd7f8ad9b774c70177f2b59747f5584ddf99f9a91c9ddc815dfc147c7b50d0001f826823a2ae3d125fa668d015c73b1cbbe0d4017f14140bd63714baccd9e6f764a4105e7e"}, 0xf6, 0x2)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x1015, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000200), &(0x7f0000000240)=0x30)
dup2(r1, r0)
r3 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f00000018c0)={0x2, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x17)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000001c0)={'veth1_virt_wifi\x00', {0x2, 0x0, @initdev}})
socket$inet_udp(0x2, 0x2, 0x0)

13:01:03 executing program 7:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r3, 0x0, r4)
ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
sendfile(r2, r4, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

13:01:03 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x22, 0x4f1, 0x1000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x3e, 0x101, 0x0, 0x0, "", [@nested={0xa}]}, 0x14}], 0x1}, 0x0)
pread64(r1, &(0x7f0000000100)=""/223, 0xdf, 0x10001)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq}, {@measure}]}})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x404000, 0x140)
ioctl$KDGKBTYPE(r3, 0x4b4c, &(0x7f0000000080))
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGKBTYPE(r4, 0x4b4c, &(0x7f0000000080))
syz_open_dev$tty20(0xc, 0x4, 0x0)

13:01:03 executing program 1:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil)
r1 = shmget(0x0, 0x1000, 0x20, &(0x7f0000ffb000/0x1000)=nil)
shmctl$IPC_RMID(r1, 0x0)
shmat(0x0, &(0x7f0000fe9000/0x3000)=nil, 0x2000)
shmctl$IPC_RMID(0x0, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
shmat(0x0, &(0x7f0000feb000/0x3000)=nil, 0x0)
shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x4)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x149, 0x7}, 0x10601, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x1, 0x8a, 0x30, 0xa9, 0x0, 0x5, 0x8, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_bp={&(0x7f0000000340), 0x2}, 0x3a00, 0x7, 0x80000000, 0x4, 0x0, 0x6, 0x3c3c, 0x0, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat2(r3, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)

13:01:03 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x22, 0x4f1, 0x1000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x3e, 0x101, 0x0, 0x0, "", [@nested={0xa}]}, 0x14}], 0x1}, 0x0)
pread64(r1, &(0x7f0000000100)=""/223, 0xdf, 0x10001)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq}, {@measure}]}})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x404000, 0x140)
ioctl$KDGKBTYPE(r3, 0x4b4c, &(0x7f0000000080))
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGKBTYPE(r4, 0x4b4c, &(0x7f0000000080))
syz_open_dev$tty20(0xc, 0x4, 0x0)

13:01:03 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x22, 0x4f1, 0x1000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x3e, 0x101, 0x0, 0x0, "", [@nested={0xa}]}, 0x14}], 0x1}, 0x0)
pread64(r1, &(0x7f0000000100)=""/223, 0xdf, 0x10001)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq}, {@measure}]}})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x404000, 0x140)
ioctl$KDGKBTYPE(r3, 0x4b4c, &(0x7f0000000080))
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGKBTYPE(r4, 0x4b4c, &(0x7f0000000080))
syz_open_dev$tty20(0xc, 0x4, 0x0)

13:01:03 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x22, 0x4f1, 0x1000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x3e, 0x101, 0x0, 0x0, "", [@nested={0xa}]}, 0x14}], 0x1}, 0x0)
pread64(r1, &(0x7f0000000100)=""/223, 0xdf, 0x10001)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq}, {@measure}]}})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x404000, 0x140)
ioctl$KDGKBTYPE(r3, 0x4b4c, &(0x7f0000000080))
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGKBTYPE(r4, 0x4b4c, &(0x7f0000000080))
syz_open_dev$tty20(0xc, 0x4, 0x0)

[  212.677560] loop7: detected capacity change from 0 to 40
[  212.679217] FAT-fs (loop7): Unrecognized mount option "./file0" or missing value
13:01:03 executing program 6:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x22, 0x4f1, 0x1000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x3e, 0x101, 0x0, 0x0, "", [@nested={0xa}]}, 0x14}], 0x1}, 0x0)
pread64(r1, &(0x7f0000000100)=""/223, 0xdf, 0x10001)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq}, {@measure}]}})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x404000, 0x140)
ioctl$KDGKBTYPE(r3, 0x4b4c, &(0x7f0000000080))
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGKBTYPE(r4, 0x4b4c, &(0x7f0000000080))
syz_open_dev$tty20(0xc, 0x4, 0x0)

[  212.840908] EXT4-fs: Ignoring removed nomblk_io_submit option
[  212.841723] ext4: Unknown parameter 'euid>00000000000000000000'
[  212.862900] ext2: Unknown parameter 'subj_role'
13:01:04 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x22, 0x4f1, 0x1000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x3e, 0x101, 0x0, 0x0, "", [@nested={0xa}]}, 0x14}], 0x1}, 0x0)
pread64(r1, &(0x7f0000000100)=""/223, 0xdf, 0x10001)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq}, {@measure}]}})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x404000, 0x140)
ioctl$KDGKBTYPE(r3, 0x4b4c, &(0x7f0000000080))
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGKBTYPE(r4, 0x4b4c, &(0x7f0000000080))
syz_open_dev$tty20(0xc, 0x4, 0x0)

13:01:04 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x22, 0x4f1, 0x1000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x3e, 0x101, 0x0, 0x0, "", [@nested={0xa}]}, 0x14}], 0x1}, 0x0)
pread64(r1, &(0x7f0000000100)=""/223, 0xdf, 0x10001)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq}, {@measure}]}})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x404000, 0x140)
ioctl$KDGKBTYPE(r3, 0x4b4c, &(0x7f0000000080))
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGKBTYPE(r4, 0x4b4c, &(0x7f0000000080))
syz_open_dev$tty20(0xc, 0x4, 0x0)

13:01:04 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x22, 0x4f1, 0x1000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x3e, 0x101, 0x0, 0x0, "", [@nested={0xa}]}, 0x14}], 0x1}, 0x0)
pread64(r1, &(0x7f0000000100)=""/223, 0xdf, 0x10001)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq}, {@measure}]}})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x404000, 0x140)
ioctl$KDGKBTYPE(r3, 0x4b4c, &(0x7f0000000080))
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGKBTYPE(r4, 0x4b4c, &(0x7f0000000080))
syz_open_dev$tty20(0xc, 0x4, 0x0)

13:01:04 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x22, 0x4f1, 0x1000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x3e, 0x101, 0x0, 0x0, "", [@nested={0xa}]}, 0x14}], 0x1}, 0x0)
pread64(r1, &(0x7f0000000100)=""/223, 0xdf, 0x10001)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq}, {@measure}]}})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x404000, 0x140)
ioctl$KDGKBTYPE(r3, 0x4b4c, &(0x7f0000000080))
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGKBTYPE(r4, 0x4b4c, &(0x7f0000000080))
syz_open_dev$tty20(0xc, 0x4, 0x0)

13:01:04 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x22, 0x4f1, 0x1000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x3e, 0x101, 0x0, 0x0, "", [@nested={0xa}]}, 0x14}], 0x1}, 0x0)
pread64(r1, &(0x7f0000000100)=""/223, 0xdf, 0x10001)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq}, {@measure}]}})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x404000, 0x140)
ioctl$KDGKBTYPE(r3, 0x4b4c, &(0x7f0000000080))
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGKBTYPE(r4, 0x4b4c, &(0x7f0000000080))
syz_open_dev$tty20(0xc, 0x4, 0x0)

13:01:04 executing program 6:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x22, 0x4f1, 0x1000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x3e, 0x101, 0x0, 0x0, "", [@nested={0xa}]}, 0x14}], 0x1}, 0x0)
pread64(r1, &(0x7f0000000100)=""/223, 0xdf, 0x10001)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq}, {@measure}]}})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x404000, 0x140)
ioctl$KDGKBTYPE(r3, 0x4b4c, &(0x7f0000000080))
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGKBTYPE(r4, 0x4b4c, &(0x7f0000000080))
syz_open_dev$tty20(0xc, 0x4, 0x0)

[  214.026693] BUG: unable to handle page fault for address: ffffed100fffc000
[  214.027280] #PF: supervisor write access in kernel mode
[  214.027707] #PF: error_code(0x0002) - not-present page
[  214.028110] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0
[  214.028630] Oops: 0002 [#4] PREEMPT SMP KASAN NOPTI
[  214.029019] CPU: 0 PID: 7239 Comm: syz-executor.1 Tainted: G      D            6.1.0-rc3-next-20221031 #1
[  214.029732] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  214.030356] RIP: 0010:__memset+0x24/0x50
[  214.030696] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  214.032052] RSP: 0018:ffff888030b6fcc0 EFLAGS: 00010212
[  214.032458] RAX: 0000000000000000 RBX: ffff88800c02d540 RCX: 1ffffe21fe602195
[  214.033010] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  214.033538] RBP: ffff88800c039000 R08: 0000000000000005 R09: ffffed1001805aa8
[  214.034077] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c039000
[  214.034626] R13: ffff88800c02d540 R14: ffffffff815f27a0 R15: 1ffff11001122c1f
[  214.035179] FS:  00007fa5e05e1700(0000) GS:ffff88806d000000(0000) knlGS:0000000000000000
[  214.035790] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  214.036240] CR2: ffffed100fffc000 CR3: 0000000019d0c000 CR4: 0000000000350ef0
[  214.036787] Call Trace:
[  214.036995]  <TASK>
[  214.037176]  kasan_unpoison+0x23/0x60
[  214.037479]  mempool_exit+0x1c2/0x330
[  214.037792]  bioset_exit+0x2c9/0x630
[  214.038092]  disk_release+0x143/0x490
[  214.038396]  ? disk_release+0x0/0x490
[  214.038710]  ? device_release+0x0/0x250
[  214.039028]  device_release+0xa2/0x250
[  214.039330]  ? device_release+0x0/0x250
[  214.039645]  kobject_put+0x173/0x280
[  214.039947]  put_device+0x1b/0x40
[  214.040228]  put_disk+0x41/0x60
[  214.040495]  loop_control_ioctl+0x4d1/0x630
[  214.040836]  ? loop_control_ioctl+0x0/0x630
[  214.041170]  ? selinux_file_ioctl+0xb1/0x270
[  214.041523]  ? loop_control_ioctl+0x0/0x630
[  214.041861]  __x64_sys_ioctl+0x19a/0x220
[  214.042192]  do_syscall_64+0x3b/0xa0
[  214.042490]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[  214.042899] RIP: 0033:0x7fa5e306bb19
[  214.043190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  214.044550] RSP: 002b:00007fa5e05e1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  214.045119] RAX: ffffffffffffffda RBX: 00007fa5e317ef60 RCX: 00007fa5e306bb19
[  214.045651] RDX: 0000000000000003 RSI: 0000000000004c81 RDI: 0000000000000006
[  214.046184] RBP: 00007fa5e30c5f6d R08: 0000000000000000 R09: 0000000000000000
[  214.046740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  214.047277] R13: 00007fff85601acf R14: 00007fa5e05e1300 R15: 0000000000022000
[  214.047825]  </TASK>
[  214.048010] Modules linked in:
[  214.048264] CR2: ffffed100fffc000
[  214.048533] ---[ end trace 0000000000000000 ]---
[  214.048892] RIP: 0010:__memset+0x24/0x50
[  214.049221] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  214.050571] RSP: 0018:ffff888030bcfcc0 EFLAGS: 00010212
[  214.050981] RAX: 0000000000000000 RBX: ffff88800c02d0c0 RCX: 1ffffe21fe602183
[  214.051516] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  214.052057] RBP: ffff88800c039000 R08: 0000000000000005 R09: ffffed1001805a18
[  214.052591] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c039000
[  214.053124] R13: ffff88800c02d0c0 R14: ffffffff815f27a0 R15: 1ffff1100112361f
[  214.053653] FS:  00007fa5e05e1700(0000) GS:ffff88806d000000(0000) knlGS:0000000000000000
[  214.054258] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  214.054702] CR2: ffffed100fffc000 CR3: 0000000019d0c000 CR4: 0000000000350ef0
13:01:05 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x22, 0x4f1, 0x1000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x3e, 0x101, 0x0, 0x0, "", [@nested={0xa}]}, 0x14}], 0x1}, 0x0)
pread64(r1, &(0x7f0000000100)=""/223, 0xdf, 0x10001)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq}, {@measure}]}})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x404000, 0x140)
ioctl$KDGKBTYPE(r3, 0x4b4c, &(0x7f0000000080))
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGKBTYPE(r4, 0x4b4c, &(0x7f0000000080))
syz_open_dev$tty20(0xc, 0x4, 0x0)

13:01:05 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x22, 0x4f1, 0x1000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x3e, 0x101, 0x0, 0x0, "", [@nested={0xa}]}, 0x14}], 0x1}, 0x0)
pread64(r1, &(0x7f0000000100)=""/223, 0xdf, 0x10001)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq}, {@measure}]}})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x404000, 0x140)
ioctl$KDGKBTYPE(r3, 0x4b4c, &(0x7f0000000080))
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGKBTYPE(r4, 0x4b4c, &(0x7f0000000080))
syz_open_dev$tty20(0xc, 0x4, 0x0)

13:01:05 executing program 6:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x22, 0x4f1, 0x1000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x3e, 0x101, 0x0, 0x0, "", [@nested={0xa}]}, 0x14}], 0x1}, 0x0)
pread64(r1, &(0x7f0000000100)=""/223, 0xdf, 0x10001)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq}, {@measure}]}})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x404000, 0x140)
ioctl$KDGKBTYPE(r3, 0x4b4c, &(0x7f0000000080))
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGKBTYPE(r4, 0x4b4c, &(0x7f0000000080))
syz_open_dev$tty20(0xc, 0x4, 0x0)

13:01:05 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x2, [{}, {}]}, 0x48)

13:01:05 executing program 7:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r3, 0x0, r4)
ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
sendfile(r2, r4, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

13:01:05 executing program 1:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil)
r1 = shmget(0x0, 0x1000, 0x20, &(0x7f0000ffb000/0x1000)=nil)
shmctl$IPC_RMID(r1, 0x0)
shmat(0x0, &(0x7f0000fe9000/0x3000)=nil, 0x2000)
shmctl$IPC_RMID(0x0, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
shmat(0x0, &(0x7f0000feb000/0x3000)=nil, 0x0)
shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x4)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x149, 0x7}, 0x10601, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x1, 0x8a, 0x30, 0xa9, 0x0, 0x5, 0x8, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_bp={&(0x7f0000000340), 0x2}, 0x3a00, 0x7, 0x80000000, 0x4, 0x0, 0x6, 0x3c3c, 0x0, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat2(r3, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)

[  214.159211] loop7: detected capacity change from 0 to 40
13:01:05 executing program 5:
getrusage(0x0, 0xfffffffffffffffe)

13:01:05 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x2, [{}, {}]}, 0x48)

13:01:05 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x7c54, &(0x7f0000000140))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)

13:01:05 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
io_setup(0xd29, &(0x7f0000000780))
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r1, 0x0)
sendfile(r0, r0, 0x0, 0x5f1)
dup2(r0, 0xffffffffffffffff)

13:01:05 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x22, 0x4f1, 0x1000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x3e, 0x101, 0x0, 0x0, "", [@nested={0xa}]}, 0x14}], 0x1}, 0x0)
pread64(r1, &(0x7f0000000100)=""/223, 0xdf, 0x10001)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq}, {@measure}]}})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x404000, 0x140)
ioctl$KDGKBTYPE(r3, 0x4b4c, &(0x7f0000000080))
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGKBTYPE(r4, 0x4b4c, &(0x7f0000000080))
syz_open_dev$tty20(0xc, 0x4, 0x0)

13:01:05 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x22, 0x4f1, 0x1000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x3e, 0x101, 0x0, 0x0, "", [@nested={0xa}]}, 0x14}], 0x1}, 0x0)
pread64(r1, &(0x7f0000000100)=""/223, 0xdf, 0x10001)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq}, {@measure}]}})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x404000, 0x140)
ioctl$KDGKBTYPE(r3, 0x4b4c, &(0x7f0000000080))
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGKBTYPE(r4, 0x4b4c, &(0x7f0000000080))
syz_open_dev$tty20(0xc, 0x4, 0x0)

13:01:05 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x2, [{}, {}]}, 0x48)

13:01:05 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x7c54, &(0x7f0000000140))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)

13:01:05 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x2, [{}, {}]}, 0x48)

13:01:05 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x22, 0x4f1, 0x1000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x3e, 0x101, 0x0, 0x0, "", [@nested={0xa}]}, 0x14}], 0x1}, 0x0)
pread64(r1, &(0x7f0000000100)=""/223, 0xdf, 0x10001)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq}, {@measure}]}})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x404000, 0x140)
ioctl$KDGKBTYPE(r3, 0x4b4c, &(0x7f0000000080))
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGKBTYPE(r4, 0x4b4c, &(0x7f0000000080))
syz_open_dev$tty20(0xc, 0x4, 0x0)

[  215.003524] syz-executor.7: attempt to access beyond end of device
[  215.003524] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[  215.004970] Buffer I/O error on dev loop7, logical block 10, lost async page write
13:01:06 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4043, 0x0)
vmsplice(r0, 0x0, 0x0, 0x0)

13:01:06 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x7c54, &(0x7f0000000140))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)

13:01:06 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0)

13:01:06 executing program 3:
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x17)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x17)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x14)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8)

13:01:06 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000000c0)="d706", 0x2}], 0x1}}], 0x1, 0x0)

13:01:06 executing program 4:
unshare(0x20000200)
unshare(0x28020080)
unshare(0x60280)

13:01:06 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
io_setup(0xd29, &(0x7f0000000780))
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r1, 0x0)
sendfile(r0, r0, 0x0, 0x5f1)
dup2(r0, 0xffffffffffffffff)

13:01:06 executing program 7:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r3, 0x0, r4)
ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
sendfile(r2, r4, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

13:01:06 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x7c54, &(0x7f0000000140))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)

13:01:06 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
io_setup(0xd29, &(0x7f0000000780))
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r1, 0x0)
sendfile(r0, r0, 0x0, 0x5f1)
dup2(r0, 0xffffffffffffffff)

13:01:06 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f0000000480), 0x0, 0x0)
ioctl$EVIOCGLED(r0, 0x541b, 0x0)

[  215.201627] loop7: detected capacity change from 0 to 40
13:01:06 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000400)=0x7, 0x4)

13:01:06 executing program 3:
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x17)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x17)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x14)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8)

13:01:06 executing program 2:
rt_sigaction(0x33, &(0x7f0000000b00)={0x0, 0x0, 0x0}, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000c00))

13:01:06 executing program 4:
unshare(0x20000200)
unshare(0x28020080)
unshare(0x60280)

13:01:06 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pivot_root(0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080))
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0)

13:01:06 executing program 3:
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x17)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x17)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x14)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8)

13:01:06 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r1, r1, 0x0, 0x100000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0)
pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000000)={0x0, r2})

[  215.796162] syz-executor.7: attempt to access beyond end of device
[  215.796162] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[  215.797522] Buffer I/O error on dev loop7, logical block 10, lost async page write
[  216.310234] Bluetooth: hci7: command 0x0406 tx timeout
13:01:07 executing program 4:
unshare(0x20000200)
unshare(0x28020080)
unshare(0x60280)

13:01:07 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg(r0, &(0x7f00000056c0)=[{{&(0x7f00000000c0)=@isdn, 0x80, &(0x7f0000001640)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000001700)=[{0x28, 0x0, 0x0, "2fe5be02b0bb82b86b4e1a794e6092c240"}], 0x28}}], 0x1, 0x0)

13:01:07 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pivot_root(0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080))
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0)

13:01:07 executing program 3:
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x17)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x17)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x14)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8)

13:01:07 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
io_setup(0xd29, &(0x7f0000000780))
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r1, 0x0)
sendfile(r0, r0, 0x0, 0x5f1)
dup2(r0, 0xffffffffffffffff)

13:01:07 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc)
setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @private}, 0xc)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0xfffff801}}, './file1\x00'})
setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0)
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0)

13:01:07 executing program 7:
mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/123)

13:01:07 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
io_setup(0xd29, &(0x7f0000000780))
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r1, 0x0)
sendfile(r0, r0, 0x0, 0x5f1)
dup2(r0, 0xffffffffffffffff)

13:01:07 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pivot_root(0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080))
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0)

13:01:07 executing program 7:
r0 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x0, 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/102, 0x66}], 0x1, 0x0, 0x0)

13:01:07 executing program 2:
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000a40), 0x80800, 0x0)
syz_open_dev$vcsu(&(0x7f0000000b00), 0x0, 0x102843)

13:01:07 executing program 4:
unshare(0x20000200)
unshare(0x28020080)
unshare(0x60280)

13:01:07 executing program 3:
r0 = syz_io_uring_setup(0x5b4f, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
pipe(&(0x7f0000000140))
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SPLICE, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close_range(r3, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0)

13:01:07 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pivot_root(0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080))
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0)

13:01:07 executing program 7:
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x35c3, &(0x7f0000000180)={0x0, 0x39dd, 0x8, 0x3, 0x1f4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
copy_file_range(r3, &(0x7f0000000040)=0xffffffffffffffc0, r3, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
copy_file_range(r4, &(0x7f0000000040)=0xffffffffffffffc0, r4, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1\x00'})
io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0)

13:01:08 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc)
setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @private}, 0xc)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0xfffff801}}, './file1\x00'})
setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0)
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0)

13:01:08 executing program 7:
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x35c3, &(0x7f0000000180)={0x0, 0x39dd, 0x8, 0x3, 0x1f4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
copy_file_range(r3, &(0x7f0000000040)=0xffffffffffffffc0, r3, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
copy_file_range(r4, &(0x7f0000000040)=0xffffffffffffffc0, r4, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1\x00'})
io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0)

13:01:08 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/partitions\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000040)=""/236, 0xec, 0x1)

13:01:08 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
io_setup(0xd29, &(0x7f0000000780))
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r1, 0x0)
sendfile(r0, r0, 0x0, 0x5f1)
dup2(r0, 0xffffffffffffffff)

13:01:08 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
io_setup(0xd29, &(0x7f0000000780))
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r1, 0x0)
sendfile(r0, r0, 0x0, 0x5f1)
dup2(r0, 0xffffffffffffffff)

13:01:08 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000240), 0x4)

13:01:08 executing program 3:
r0 = syz_io_uring_setup(0x5b4f, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
pipe(&(0x7f0000000140))
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SPLICE, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close_range(r3, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0)

13:01:08 executing program 4:
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x35c3, &(0x7f0000000180)={0x0, 0x39dd, 0x8, 0x3, 0x1f4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
copy_file_range(r3, &(0x7f0000000040)=0xffffffffffffffc0, r3, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
copy_file_range(r4, &(0x7f0000000040)=0xffffffffffffffc0, r4, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1\x00'})
io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0)

13:01:08 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/partitions\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000040)=""/236, 0xec, 0x1)

13:01:08 executing program 2:
clock_gettime(0x0, &(0x7f0000000040))

13:01:08 executing program 3:
r0 = syz_io_uring_setup(0x5b4f, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
pipe(&(0x7f0000000140))
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SPLICE, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close_range(r3, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0)

13:01:08 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/partitions\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000040)=""/236, 0xec, 0x1)

13:01:08 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x21)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000)
close(r2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r0, 0x0, 0x100000)

13:01:08 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/partitions\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000040)=""/236, 0xec, 0x1)

13:01:09 executing program 1:
fchdir(0xffffffffffffffff)

13:01:09 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_score_adj\x00')
pread64(r0, 0x0, 0x0, 0x0)

13:01:09 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x0, 0x0})

13:01:09 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc)
setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @private}, 0xc)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0xfffff801}}, './file1\x00'})
setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0)
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0)

13:01:09 executing program 3:
r0 = syz_io_uring_setup(0x5b4f, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
pipe(&(0x7f0000000140))
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SPLICE, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close_range(r3, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0)

13:01:10 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x10, 0xfc7f, 0x7ffc)
sendfile(r1, r0, &(0x7f0000000200)=0x10001, 0x3)

13:01:10 executing program 7:
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x35c3, &(0x7f0000000180)={0x0, 0x39dd, 0x8, 0x3, 0x1f4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
copy_file_range(r3, &(0x7f0000000040)=0xffffffffffffffc0, r3, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
copy_file_range(r4, &(0x7f0000000040)=0xffffffffffffffc0, r4, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1\x00'})
io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0)

13:01:10 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x21)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000)
close(r2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r0, 0x0, 0x100000)

13:01:10 executing program 4:
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x35c3, &(0x7f0000000180)={0x0, 0x39dd, 0x8, 0x3, 0x1f4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
copy_file_range(r3, &(0x7f0000000040)=0xffffffffffffffc0, r3, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
copy_file_range(r4, &(0x7f0000000040)=0xffffffffffffffc0, r4, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1\x00'})
io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0)

13:01:10 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3f}}, './cgroup/cgroup.procs\x00'})
ioprio_set$uid(0x3, 0x0, 0x0)
ioprio_set$uid(0x0, 0x0, 0x0)

13:01:10 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x10, 0xfc7f, 0x7ffc)
sendfile(r1, r0, &(0x7f0000000200)=0x10001, 0x3)

13:01:10 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3f}}, './cgroup/cgroup.procs\x00'})
ioprio_set$uid(0x3, 0x0, 0x0)
ioprio_set$uid(0x0, 0x0, 0x0)

13:01:10 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc)
setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @private}, 0xc)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0xfffff801}}, './file1\x00'})
setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0)
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0)

13:01:10 executing program 4:
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x35c3, &(0x7f0000000180)={0x0, 0x39dd, 0x8, 0x3, 0x1f4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
copy_file_range(r3, &(0x7f0000000040)=0xffffffffffffffc0, r3, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
copy_file_range(r4, &(0x7f0000000040)=0xffffffffffffffc0, r4, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1\x00'})
io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0)

13:01:10 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3f}}, './cgroup/cgroup.procs\x00'})
ioprio_set$uid(0x3, 0x0, 0x0)
ioprio_set$uid(0x0, 0x0, 0x0)

13:01:10 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x10, 0xfc7f, 0x7ffc)
sendfile(r1, r0, &(0x7f0000000200)=0x10001, 0x3)

13:01:10 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)=@gcm_256={{}, "f16a1060b39741db", "25ea1fa042393c08195d8190ab9064928e854e8fc4f750b4b58f2308154b9b36", "eaf98883", "c06cfe77aed1f561"}, 0x38)

13:01:10 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3f}}, './cgroup/cgroup.procs\x00'})
ioprio_set$uid(0x3, 0x0, 0x0)
ioprio_set$uid(0x0, 0x0, 0x0)

13:01:10 executing program 7:
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x35c3, &(0x7f0000000180)={0x0, 0x39dd, 0x8, 0x3, 0x1f4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
copy_file_range(r3, &(0x7f0000000040)=0xffffffffffffffc0, r3, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
copy_file_range(r4, &(0x7f0000000040)=0xffffffffffffffc0, r4, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1\x00'})
io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0)

13:01:10 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)=@gcm_256={{}, "f16a1060b39741db", "25ea1fa042393c08195d8190ab9064928e854e8fc4f750b4b58f2308154b9b36", "eaf98883", "c06cfe77aed1f561"}, 0x38)

13:01:10 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
flock(r0, 0x7a2dcdd04d9865b5)

13:01:10 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x10, 0xfc7f, 0x7ffc)
sendfile(r1, r0, &(0x7f0000000200)=0x10001, 0x3)

13:01:10 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x21)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000)
close(r2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r0, 0x0, 0x100000)

13:01:10 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
futex(0x0, 0x8c, 0x1, 0x0, &(0x7f0000000380), 0x0)

13:01:10 executing program 0:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0)
sendfile(r0, r0, 0x0, 0x0)

13:01:10 executing program 6:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0x0)

[  219.533421] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
13:01:10 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)=@gcm_256={{}, "f16a1060b39741db", "25ea1fa042393c08195d8190ab9064928e854e8fc4f750b4b58f2308154b9b36", "eaf98883", "c06cfe77aed1f561"}, 0x38)

13:01:10 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
inotify_init()
close_range(r0, 0xffffffffffffffff, 0x0)

13:01:10 executing program 3:
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000000c0)=""/162, 0xa2)

13:01:10 executing program 6:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file1\x00')

13:01:10 executing program 0:
syz_io_uring_setup(0x473, &(0x7f0000000600), &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x83, &(0x7f0000000000), &(0x7f0000526000/0x1000)=nil, &(0x7f0000d33000/0xa000)=nil, &(0x7f0000000080), 0x0)
r0 = syz_io_uring_setup(0x5edb, &(0x7f0000000240), &(0x7f0000832000/0x4000)=nil, &(0x7f00009e5000/0x4000)=nil, &(0x7f00000002c0), 0x0)
syz_io_uring_setup(0xeaf, &(0x7f0000000380), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000654000/0x4000)=nil, &(0x7f0000000100), 0x0)
syz_io_uring_setup(0x2152, &(0x7f0000000300)={0x0, 0xc481, 0x2, 0x0, 0x0, 0x0, r0}, &(0x7f0000d24000/0x4000)=nil, &(0x7f0000703000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200))

13:01:10 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)=@gcm_256={{}, "f16a1060b39741db", "25ea1fa042393c08195d8190ab9064928e854e8fc4f750b4b58f2308154b9b36", "eaf98883", "c06cfe77aed1f561"}, 0x38)

13:01:10 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xee00)
utime(&(0x7f0000000300)='./file1\x00', 0x0)

13:01:10 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETAW(r0, 0x5404, 0x0)
fsetxattr$security_evm(r0, &(0x7f0000000040), &(0x7f0000000100)=@v1={0x2, "bb"}, 0x2, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10)

13:01:11 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x21)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000)
close(r2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r0, 0x0, 0x100000)

13:01:11 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETAW(r0, 0x5404, 0x0)
fsetxattr$security_evm(r0, &(0x7f0000000040), &(0x7f0000000100)=@v1={0x2, "bb"}, 0x2, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10)

13:01:11 executing program 3:
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000000c0)=""/162, 0xa2)

13:01:11 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETAW(r0, 0x5404, 0x0)
fsetxattr$security_evm(r0, &(0x7f0000000040), &(0x7f0000000100)=@v1={0x2, "bb"}, 0x2, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10)

13:01:11 executing program 7:
kexec_load(0x0, 0x10, 0x0, 0x0)

13:01:11 executing program 1:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x8001, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

13:01:11 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x17e})
unlink(&(0x7f0000000100)='./file0\x00')

13:01:11 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fadvise64(r0, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0)

13:01:11 executing program 3:
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000000c0)=""/162, 0xa2)

13:01:11 executing program 7:
kexec_load(0x0, 0x10, 0x0, 0x0)

13:01:11 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x12, 0xfffffffffffffffd, &(0x7f0000000000))

13:01:11 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fadvise64(r0, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0)

13:01:11 executing program 7:
kexec_load(0x0, 0x10, 0x0, 0x0)

13:01:11 executing program 3:
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000000c0)=""/162, 0xa2)

13:01:11 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fadvise64(r0, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0)

13:01:11 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x12, 0xfffffffffffffffd, &(0x7f0000000000))

13:01:12 executing program 7:
kexec_load(0x0, 0x10, 0x0, 0x0)

13:01:12 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x12, 0xfffffffffffffffd, &(0x7f0000000000))

13:01:12 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETAW(r0, 0x5404, 0x0)
fsetxattr$security_evm(r0, &(0x7f0000000040), &(0x7f0000000100)=@v1={0x2, "bb"}, 0x2, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10)

13:01:12 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETAW(r0, 0x5404, 0x0)
fsetxattr$security_evm(r0, &(0x7f0000000040), &(0x7f0000000100)=@v1={0x2, "bb"}, 0x2, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10)

13:01:12 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fadvise64(r0, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0)

13:01:12 executing program 3:
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

13:01:12 executing program 1:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x8001, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

13:01:12 executing program 3:
syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @timestamp}}}}, 0x0)

13:01:12 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x12, 0xfffffffffffffffd, &(0x7f0000000000))

13:01:12 executing program 3:
syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @timestamp}}}}, 0x0)

13:01:12 executing program 1:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x8001, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

13:01:12 executing program 2:
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat2(0xffffffffffffffff, &(0x7f00000009c0)='./file1\x00', &(0x7f0000000a00)={0x80900, 0x20}, 0x18)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x0, 0x0)
syncfs(0xffffffffffffffff)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_setup(0x6c69, &(0x7f0000000340)={0x0, 0x92c5, 0x0, 0x3, 0x26, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000003c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000c, 0x810, r1, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_bp={&(0x7f0000000300), 0xd}, 0x8fa6, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x400}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x101, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x3c, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00bb7dd8fd0dfa22b4100"}, 0xd8)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000), 0x4)
socket$unix(0x1, 0x1, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
accept4$unix(r0, &(0x7f00000001c0), &(0x7f0000000240)=0x6e, 0x80800)


VM DIAGNOSIS:
13:01:02  Registers:
info registers vcpu 0
RAX=ffffffff8438e5a0 RBX=ffffffff85032940 RCX=ffffffff8436f172 RDX=ffffed100da06799
RSI=0000000000000001 RDI=ffffffff8438ea93 RBP=0000000000000000 RSP=ffffffff85007e20
R8 =0000000000000000 R9 =ffff88806d033cc3 R10=ffffed100da06798 R11=0000000000000001
R12=fffffbfff0a06528 R13=ffffffff8590bb10 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff8438e5ab RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806d000000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0f0ad97000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0f0ad95000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555556681c58 CR3=0000000019d0e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000ff0000 XMM01=6a6e695f31313230385f7a7973006273
XMM02=00000000000000000000000000000000 XMM03=00007fa5e31527c800007fa5e31527c0
XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff82451091 RDI=ffffffff879a19e0 RBP=ffffffff879a19a0 RSP=ffff888030bcf488
R8 =0000000000000001 R9 =000000000000000a R10=000000000000006f R11=0000000000000001
R12=000000000000006f R13=ffffffff879a19a0 R14=0000000000000010 R15=ffffffff82451080
RIP=ffffffff824510e9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fa5e05e1700 00000000 00000000
GS =0000 ffff88806d100000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe5582c71000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe5582c6f000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=ffffed100fffc000 CR3=0000000019d0e000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=7465677261742e79636e656772656d65
XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=00000000000000210065636976726573
XMM04=00005605c128b3a000005605c11c4000 XMM05=ff01010101010000ffffffff00000001
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=732f6563696c732e6d65747379732f3a XMM09=00000000000000000000000000000000
XMM10=00000000000000000000200000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000