Warning: Permanently added '[localhost]:53092' (ECDSA) to the list of known hosts.
2022/10/31 12:29:49 fuzzer started
2022/10/31 12:29:50 dialing manager at localhost:40945
syzkaller login: [   40.518405] cgroup: Unknown subsys name 'net'
[   40.615213] cgroup: Unknown subsys name 'rlimit'
2022/10/31 12:30:05 syscalls: 2217
2022/10/31 12:30:05 code coverage: enabled
2022/10/31 12:30:05 comparison tracing: enabled
2022/10/31 12:30:05 extra coverage: enabled
2022/10/31 12:30:05 setuid sandbox: enabled
2022/10/31 12:30:05 namespace sandbox: enabled
2022/10/31 12:30:05 Android sandbox: enabled
2022/10/31 12:30:05 fault injection: enabled
2022/10/31 12:30:05 leak checking: enabled
2022/10/31 12:30:05 net packet injection: enabled
2022/10/31 12:30:05 net device setup: enabled
2022/10/31 12:30:05 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/10/31 12:30:05 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/10/31 12:30:05 USB emulation: enabled
2022/10/31 12:30:05 hci packet injection: enabled
2022/10/31 12:30:05 wifi device emulation: enabled
2022/10/31 12:30:05 802.15.4 emulation: enabled
2022/10/31 12:30:05 fetching corpus: 0, signal 0/2000 (executing program)
2022/10/31 12:30:05 fetching corpus: 50, signal 19932/23598 (executing program)
2022/10/31 12:30:05 fetching corpus: 100, signal 37135/42296 (executing program)
2022/10/31 12:30:05 fetching corpus: 150, signal 45621/52266 (executing program)
2022/10/31 12:30:05 fetching corpus: 200, signal 50757/58902 (executing program)
2022/10/31 12:30:05 fetching corpus: 250, signal 59208/68608 (executing program)
2022/10/31 12:30:05 fetching corpus: 300, signal 69086/79529 (executing program)
2022/10/31 12:30:06 fetching corpus: 350, signal 74523/86147 (executing program)
2022/10/31 12:30:06 fetching corpus: 400, signal 78666/91427 (executing program)
2022/10/31 12:30:06 fetching corpus: 450, signal 82397/96304 (executing program)
2022/10/31 12:30:06 fetching corpus: 500, signal 89449/104247 (executing program)
2022/10/31 12:30:06 fetching corpus: 550, signal 92142/108087 (executing program)
2022/10/31 12:30:06 fetching corpus: 600, signal 96235/113170 (executing program)
2022/10/31 12:30:06 fetching corpus: 650, signal 99503/117343 (executing program)
2022/10/31 12:30:06 fetching corpus: 700, signal 102281/121023 (executing program)
2022/10/31 12:30:06 fetching corpus: 750, signal 105248/124891 (executing program)
2022/10/31 12:30:07 fetching corpus: 800, signal 108456/128887 (executing program)
2022/10/31 12:30:07 fetching corpus: 850, signal 112138/133256 (executing program)
2022/10/31 12:30:07 fetching corpus: 900, signal 115410/137231 (executing program)
2022/10/31 12:30:07 fetching corpus: 950, signal 117737/140312 (executing program)
2022/10/31 12:30:07 fetching corpus: 1000, signal 119343/142813 (executing program)
2022/10/31 12:30:07 fetching corpus: 1050, signal 121499/145745 (executing program)
2022/10/31 12:30:07 fetching corpus: 1100, signal 123015/148074 (executing program)
2022/10/31 12:30:07 fetching corpus: 1150, signal 125145/150945 (executing program)
2022/10/31 12:30:08 fetching corpus: 1200, signal 128890/155060 (executing program)
2022/10/31 12:30:08 fetching corpus: 1250, signal 130914/157741 (executing program)
2022/10/31 12:30:08 fetching corpus: 1300, signal 132142/159770 (executing program)
2022/10/31 12:30:08 fetching corpus: 1350, signal 133839/162151 (executing program)
2022/10/31 12:30:08 fetching corpus: 1400, signal 136389/165214 (executing program)
2022/10/31 12:30:08 fetching corpus: 1450, signal 138406/167823 (executing program)
2022/10/31 12:30:08 fetching corpus: 1500, signal 139659/169767 (executing program)
2022/10/31 12:30:08 fetching corpus: 1550, signal 141078/171892 (executing program)
2022/10/31 12:30:09 fetching corpus: 1600, signal 143200/174491 (executing program)
2022/10/31 12:30:09 fetching corpus: 1650, signal 145204/176943 (executing program)
2022/10/31 12:30:09 fetching corpus: 1700, signal 146219/178628 (executing program)
2022/10/31 12:30:09 fetching corpus: 1750, signal 147664/180607 (executing program)
2022/10/31 12:30:09 fetching corpus: 1800, signal 149022/182531 (executing program)
2022/10/31 12:30:09 fetching corpus: 1850, signal 150581/184548 (executing program)
2022/10/31 12:30:09 fetching corpus: 1900, signal 151649/186229 (executing program)
2022/10/31 12:30:09 fetching corpus: 1950, signal 153327/188303 (executing program)
2022/10/31 12:30:09 fetching corpus: 2000, signal 154868/190267 (executing program)
2022/10/31 12:30:09 fetching corpus: 2049, signal 156816/192466 (executing program)
2022/10/31 12:30:10 fetching corpus: 2099, signal 157787/193973 (executing program)
2022/10/31 12:30:10 fetching corpus: 2149, signal 160002/196309 (executing program)
2022/10/31 12:30:10 fetching corpus: 2199, signal 161212/197949 (executing program)
2022/10/31 12:30:10 fetching corpus: 2249, signal 162299/199483 (executing program)
2022/10/31 12:30:10 fetching corpus: 2299, signal 163558/201165 (executing program)
2022/10/31 12:30:10 fetching corpus: 2349, signal 164504/202517 (executing program)
2022/10/31 12:30:10 fetching corpus: 2399, signal 166430/204538 (executing program)
2022/10/31 12:30:10 fetching corpus: 2449, signal 167327/205860 (executing program)
2022/10/31 12:30:11 fetching corpus: 2499, signal 168243/207267 (executing program)
2022/10/31 12:30:11 fetching corpus: 2549, signal 169118/208600 (executing program)
2022/10/31 12:30:11 fetching corpus: 2599, signal 170027/209940 (executing program)
2022/10/31 12:30:11 fetching corpus: 2648, signal 171390/211555 (executing program)
2022/10/31 12:30:11 fetching corpus: 2698, signal 172725/213149 (executing program)
2022/10/31 12:30:11 fetching corpus: 2748, signal 173812/214542 (executing program)
2022/10/31 12:30:11 fetching corpus: 2797, signal 174818/215875 (executing program)
2022/10/31 12:30:11 fetching corpus: 2847, signal 175913/217210 (executing program)
2022/10/31 12:30:11 fetching corpus: 2897, signal 176894/218451 (executing program)
2022/10/31 12:30:12 fetching corpus: 2947, signal 177960/219767 (executing program)
2022/10/31 12:30:12 fetching corpus: 2997, signal 178707/220877 (executing program)
2022/10/31 12:30:12 fetching corpus: 3047, signal 180108/222366 (executing program)
2022/10/31 12:30:12 fetching corpus: 3097, signal 181677/223897 (executing program)
2022/10/31 12:30:12 fetching corpus: 3147, signal 182520/225066 (executing program)
2022/10/31 12:30:12 fetching corpus: 3197, signal 183472/226235 (executing program)
2022/10/31 12:30:12 fetching corpus: 3247, signal 185109/227713 (executing program)
2022/10/31 12:30:12 fetching corpus: 3297, signal 185728/228715 (executing program)
2022/10/31 12:30:13 fetching corpus: 3345, signal 187115/230046 (executing program)
2022/10/31 12:30:13 fetching corpus: 3395, signal 187866/231047 (executing program)
2022/10/31 12:30:13 fetching corpus: 3445, signal 189438/232430 (executing program)
2022/10/31 12:30:13 fetching corpus: 3495, signal 190459/233566 (executing program)
2022/10/31 12:30:13 fetching corpus: 3545, signal 191511/234678 (executing program)
2022/10/31 12:30:13 fetching corpus: 3595, signal 192293/235613 (executing program)
2022/10/31 12:30:13 fetching corpus: 3645, signal 192952/236495 (executing program)
2022/10/31 12:30:13 fetching corpus: 3695, signal 194128/237606 (executing program)
2022/10/31 12:30:13 fetching corpus: 3745, signal 194638/238431 (executing program)
2022/10/31 12:30:14 fetching corpus: 3795, signal 195303/239252 (executing program)
2022/10/31 12:30:14 fetching corpus: 3845, signal 196292/240252 (executing program)
2022/10/31 12:30:14 fetching corpus: 3894, signal 197163/241185 (executing program)
2022/10/31 12:30:14 fetching corpus: 3944, signal 197901/242055 (executing program)
2022/10/31 12:30:14 fetching corpus: 3994, signal 198515/242818 (executing program)
2022/10/31 12:30:14 fetching corpus: 4044, signal 199457/243783 (executing program)
2022/10/31 12:30:14 fetching corpus: 4094, signal 200415/244710 (executing program)
2022/10/31 12:30:14 fetching corpus: 4144, signal 201021/245454 (executing program)
2022/10/31 12:30:15 fetching corpus: 4194, signal 201787/246237 (executing program)
2022/10/31 12:30:15 fetching corpus: 4244, signal 202361/246973 (executing program)
2022/10/31 12:30:15 fetching corpus: 4294, signal 203021/247716 (executing program)
2022/10/31 12:30:15 fetching corpus: 4344, signal 204105/248676 (executing program)
2022/10/31 12:30:15 fetching corpus: 4394, signal 204944/249487 (executing program)
2022/10/31 12:30:15 fetching corpus: 4444, signal 205676/250218 (executing program)
2022/10/31 12:30:15 fetching corpus: 4494, signal 206624/250994 (executing program)
2022/10/31 12:30:15 fetching corpus: 4544, signal 207092/251638 (executing program)
2022/10/31 12:30:15 fetching corpus: 4593, signal 207695/252316 (executing program)
2022/10/31 12:30:16 fetching corpus: 4643, signal 208488/253015 (executing program)
2022/10/31 12:30:16 fetching corpus: 4693, signal 209208/253679 (executing program)
2022/10/31 12:30:16 fetching corpus: 4743, signal 209684/254285 (executing program)
2022/10/31 12:30:16 fetching corpus: 4793, signal 210461/254961 (executing program)
2022/10/31 12:30:16 fetching corpus: 4843, signal 211139/255627 (executing program)
2022/10/31 12:30:16 fetching corpus: 4893, signal 211715/256216 (executing program)
2022/10/31 12:30:16 fetching corpus: 4943, signal 212484/256888 (executing program)
2022/10/31 12:30:16 fetching corpus: 4993, signal 213230/257519 (executing program)
2022/10/31 12:30:17 fetching corpus: 5043, signal 213890/258103 (executing program)
2022/10/31 12:30:17 fetching corpus: 5092, signal 214828/258870 (executing program)
2022/10/31 12:30:17 fetching corpus: 5142, signal 215492/259409 (executing program)
2022/10/31 12:30:17 fetching corpus: 5192, signal 216040/259953 (executing program)
2022/10/31 12:30:17 fetching corpus: 5241, signal 216533/260492 (executing program)
2022/10/31 12:30:17 fetching corpus: 5291, signal 217124/261039 (executing program)
2022/10/31 12:30:17 fetching corpus: 5341, signal 217803/261578 (executing program)
2022/10/31 12:30:17 fetching corpus: 5391, signal 218482/262157 (executing program)
2022/10/31 12:30:17 fetching corpus: 5441, signal 219123/262713 (executing program)
2022/10/31 12:30:18 fetching corpus: 5490, signal 219576/263219 (executing program)
2022/10/31 12:30:18 fetching corpus: 5540, signal 219919/263703 (executing program)
2022/10/31 12:30:18 fetching corpus: 5590, signal 220380/264178 (executing program)
2022/10/31 12:30:18 fetching corpus: 5640, signal 220924/264669 (executing program)
2022/10/31 12:30:18 fetching corpus: 5690, signal 221462/265145 (executing program)
2022/10/31 12:30:18 fetching corpus: 5740, signal 222109/265608 (executing program)
2022/10/31 12:30:18 fetching corpus: 5790, signal 222869/266260 (executing program)
2022/10/31 12:30:18 fetching corpus: 5840, signal 223828/266730 (executing program)
2022/10/31 12:30:19 fetching corpus: 5890, signal 224352/267159 (executing program)
2022/10/31 12:30:19 fetching corpus: 5940, signal 224788/267558 (executing program)
2022/10/31 12:30:19 fetching corpus: 5990, signal 225421/267975 (executing program)
2022/10/31 12:30:19 fetching corpus: 6040, signal 226954/268471 (executing program)
2022/10/31 12:30:19 fetching corpus: 6090, signal 227429/268820 (executing program)
2022/10/31 12:30:19 fetching corpus: 6140, signal 228364/269249 (executing program)
2022/10/31 12:30:19 fetching corpus: 6190, signal 228977/269614 (executing program)
2022/10/31 12:30:19 fetching corpus: 6240, signal 229432/269962 (executing program)
2022/10/31 12:30:20 fetching corpus: 6290, signal 229928/270318 (executing program)
2022/10/31 12:30:20 fetching corpus: 6340, signal 230666/270694 (executing program)
2022/10/31 12:30:20 fetching corpus: 6390, signal 231000/271031 (executing program)
2022/10/31 12:30:20 fetching corpus: 6440, signal 231768/271382 (executing program)
2022/10/31 12:30:20 fetching corpus: 6490, signal 232230/271708 (executing program)
2022/10/31 12:30:20 fetching corpus: 6540, signal 233046/272034 (executing program)
2022/10/31 12:30:20 fetching corpus: 6589, signal 233571/272338 (executing program)
2022/10/31 12:30:20 fetching corpus: 6639, signal 234190/272641 (executing program)
2022/10/31 12:30:20 fetching corpus: 6689, signal 234540/272926 (executing program)
2022/10/31 12:30:21 fetching corpus: 6739, signal 235249/273092 (executing program)
2022/10/31 12:30:21 fetching corpus: 6789, signal 235859/273092 (executing program)
2022/10/31 12:30:21 fetching corpus: 6837, signal 236262/273092 (executing program)
2022/10/31 12:30:21 fetching corpus: 6887, signal 236710/273092 (executing program)
2022/10/31 12:30:21 fetching corpus: 6936, signal 237236/273092 (executing program)
2022/10/31 12:30:21 fetching corpus: 6986, signal 237849/273094 (executing program)
2022/10/31 12:30:21 fetching corpus: 7036, signal 238256/273098 (executing program)
2022/10/31 12:30:21 fetching corpus: 7086, signal 238661/273108 (executing program)
2022/10/31 12:30:22 fetching corpus: 7136, signal 239146/273108 (executing program)
2022/10/31 12:30:22 fetching corpus: 7186, signal 239516/273109 (executing program)
2022/10/31 12:30:22 fetching corpus: 7234, signal 240276/273109 (executing program)
2022/10/31 12:30:22 fetching corpus: 7284, signal 240927/273134 (executing program)
2022/10/31 12:30:22 fetching corpus: 7334, signal 242087/273136 (executing program)
2022/10/31 12:30:22 fetching corpus: 7384, signal 242783/273199 (executing program)
2022/10/31 12:30:22 fetching corpus: 7434, signal 243471/273211 (executing program)
2022/10/31 12:30:22 fetching corpus: 7484, signal 244024/273211 (executing program)
2022/10/31 12:30:22 fetching corpus: 7534, signal 244392/273211 (executing program)
2022/10/31 12:30:22 fetching corpus: 7584, signal 245159/273304 (executing program)
2022/10/31 12:30:23 fetching corpus: 7634, signal 245585/273304 (executing program)
2022/10/31 12:30:23 fetching corpus: 7684, signal 246122/273304 (executing program)
2022/10/31 12:30:23 fetching corpus: 7734, signal 246549/273304 (executing program)
2022/10/31 12:30:23 fetching corpus: 7783, signal 246875/273304 (executing program)
2022/10/31 12:30:23 fetching corpus: 7833, signal 247581/273304 (executing program)
2022/10/31 12:30:23 fetching corpus: 7883, signal 247911/273304 (executing program)
2022/10/31 12:30:23 fetching corpus: 7933, signal 249515/273305 (executing program)
2022/10/31 12:30:24 fetching corpus: 7983, signal 250168/273306 (executing program)
2022/10/31 12:30:24 fetching corpus: 8033, signal 250537/273315 (executing program)
2022/10/31 12:30:24 fetching corpus: 8083, signal 250787/273316 (executing program)
2022/10/31 12:30:24 fetching corpus: 8133, signal 251392/273318 (executing program)
2022/10/31 12:30:24 fetching corpus: 8182, signal 251733/273318 (executing program)
2022/10/31 12:30:24 fetching corpus: 8232, signal 252169/273318 (executing program)
2022/10/31 12:30:24 fetching corpus: 8282, signal 252562/273318 (executing program)
2022/10/31 12:30:24 fetching corpus: 8332, signal 252883/273318 (executing program)
2022/10/31 12:30:24 fetching corpus: 8382, signal 253525/273318 (executing program)
2022/10/31 12:30:25 fetching corpus: 8432, signal 254057/273327 (executing program)
2022/10/31 12:30:25 fetching corpus: 8482, signal 254304/273327 (executing program)
2022/10/31 12:30:25 fetching corpus: 8532, signal 254918/273330 (executing program)
2022/10/31 12:30:25 fetching corpus: 8582, signal 255344/273330 (executing program)
2022/10/31 12:30:25 fetching corpus: 8631, signal 255860/273330 (executing program)
2022/10/31 12:30:25 fetching corpus: 8681, signal 256295/273330 (executing program)
2022/10/31 12:30:25 fetching corpus: 8731, signal 256665/273330 (executing program)
2022/10/31 12:30:26 fetching corpus: 8781, signal 257020/273330 (executing program)
2022/10/31 12:30:26 fetching corpus: 8831, signal 257475/273332 (executing program)
2022/10/31 12:30:26 fetching corpus: 8881, signal 257831/273333 (executing program)
2022/10/31 12:30:26 fetching corpus: 8931, signal 258161/273333 (executing program)
2022/10/31 12:30:26 fetching corpus: 8981, signal 258729/273333 (executing program)
2022/10/31 12:30:26 fetching corpus: 9031, signal 259066/273333 (executing program)
2022/10/31 12:30:26 fetching corpus: 9081, signal 259369/273333 (executing program)
2022/10/31 12:30:26 fetching corpus: 9130, signal 259809/273336 (executing program)
2022/10/31 12:30:27 fetching corpus: 9180, signal 260116/273336 (executing program)
2022/10/31 12:30:27 fetching corpus: 9230, signal 260646/273346 (executing program)
2022/10/31 12:30:27 fetching corpus: 9280, signal 260947/273346 (executing program)
2022/10/31 12:30:27 fetching corpus: 9330, signal 261223/273346 (executing program)
2022/10/31 12:30:27 fetching corpus: 9380, signal 261792/273346 (executing program)
2022/10/31 12:30:27 fetching corpus: 9430, signal 262144/273346 (executing program)
2022/10/31 12:30:27 fetching corpus: 9480, signal 262595/273346 (executing program)
2022/10/31 12:30:28 fetching corpus: 9530, signal 263055/273367 (executing program)
2022/10/31 12:30:28 fetching corpus: 9580, signal 263533/273367 (executing program)
2022/10/31 12:30:28 fetching corpus: 9630, signal 263992/273367 (executing program)
2022/10/31 12:30:28 fetching corpus: 9680, signal 264514/273367 (executing program)
2022/10/31 12:30:28 fetching corpus: 9730, signal 264981/273367 (executing program)
2022/10/31 12:30:28 fetching corpus: 9780, signal 265257/273367 (executing program)
2022/10/31 12:30:28 fetching corpus: 9830, signal 265583/273396 (executing program)
2022/10/31 12:30:29 fetching corpus: 9880, signal 265893/273397 (executing program)
2022/10/31 12:30:29 fetching corpus: 9930, signal 266143/273397 (executing program)
2022/10/31 12:30:29 fetching corpus: 9979, signal 266586/273397 (executing program)
2022/10/31 12:30:29 fetching corpus: 10029, signal 266877/273399 (executing program)
2022/10/31 12:30:29 fetching corpus: 10079, signal 267231/273399 (executing program)
2022/10/31 12:30:29 fetching corpus: 10129, signal 267580/273405 (executing program)
2022/10/31 12:30:29 fetching corpus: 10178, signal 267987/273405 (executing program)
2022/10/31 12:30:29 fetching corpus: 10210, signal 268190/273405 (executing program)
2022/10/31 12:30:29 fetching corpus: 10210, signal 268190/273405 (executing program)
2022/10/31 12:30:32 starting 8 fuzzer processes
12:30:32 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f0000000000)=""/4096)

12:30:32 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]})
capget(&(0x7f0000000000)={0x20071026}, 0x0)

12:30:32 executing program 2:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="03", 0x1}], 0x5, 0x0, 0x0)

12:30:32 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff}, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[   82.156817] audit: type=1400 audit(1667219432.062:6): avc:  denied  { execmem } for  pid=283 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
12:30:32 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup(r0)

12:30:32 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0007}]})
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
writev(r0, 0x0, 0x0)

12:30:32 executing program 6:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
getuid()
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000005d80)={{0x1, 0x1, 0x18, r0, {0x5}}, '\x00'})
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000240)={0x90000000})

12:30:32 executing program 7:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={r1, 0x1, 0x6, @link_local}, 0x10)

[   83.386879] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   83.389956] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   83.391236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   83.395179] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   83.397143] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   83.400052] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   83.404710] Bluetooth: hci0: HCI_REQ-0x0c1a
[   83.456245] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   83.462090] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   83.464053] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   83.467341] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   83.468710] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   83.470244] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   83.476352] Bluetooth: hci4: HCI_REQ-0x0c1a
[   83.481884] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   83.486198] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   83.498670] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   83.501727] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   83.503316] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   83.504161] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   83.504410] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   83.506472] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   83.507597] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   83.508655] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   83.510562] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   83.511985] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   83.513199] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   83.514542] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   83.516138] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   83.518079] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   83.521388] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   83.524918] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   83.526523] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   83.528137] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   83.530113] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   83.535928] Bluetooth: hci7: HCI_REQ-0x0c1a
[   83.536572] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   83.539214] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   83.544225] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   83.548030] Bluetooth: hci6: HCI_REQ-0x0c1a
[   83.552418] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   83.555056] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   83.569317] Bluetooth: hci1: HCI_REQ-0x0c1a
[   83.588862] Bluetooth: hci3: HCI_REQ-0x0c1a
[   83.606198] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   83.618628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   83.623715] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   83.625606] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   83.649735] Bluetooth: hci5: HCI_REQ-0x0c1a
[   85.471182] Bluetooth: hci0: command 0x0409 tx timeout
[   85.471620] Bluetooth: hci2: Opcode 0x c03 failed: -110
[   85.534863] Bluetooth: hci4: command 0x0409 tx timeout
[   85.599335] Bluetooth: hci1: command 0x0409 tx timeout
[   85.599934] Bluetooth: hci6: command 0x0409 tx timeout
[   85.600445] Bluetooth: hci7: command 0x0409 tx timeout
[   85.662875] Bluetooth: hci3: command 0x0409 tx timeout
[   85.663905] Bluetooth: hci5: command 0x0409 tx timeout
[   87.518995] Bluetooth: hci0: command 0x041b tx timeout
[   87.582888] Bluetooth: hci4: command 0x041b tx timeout
[   87.647072] Bluetooth: hci7: command 0x041b tx timeout
[   87.647763] Bluetooth: hci6: command 0x041b tx timeout
[   87.648407] Bluetooth: hci1: command 0x041b tx timeout
[   87.710884] Bluetooth: hci5: command 0x041b tx timeout
[   87.711538] Bluetooth: hci3: command 0x041b tx timeout
[   89.566879] Bluetooth: hci0: command 0x040f tx timeout
[   89.630957] Bluetooth: hci4: command 0x040f tx timeout
[   89.696949] Bluetooth: hci6: command 0x040f tx timeout
[   89.697029] Bluetooth: hci1: command 0x040f tx timeout
[   89.697406] Bluetooth: hci7: command 0x040f tx timeout
[   89.759036] Bluetooth: hci3: command 0x040f tx timeout
[   89.759056] Bluetooth: hci5: command 0x040f tx timeout
[   91.102937] Bluetooth: hci2: Opcode 0x c03 failed: -110
[   91.615836] Bluetooth: hci0: command 0x0419 tx timeout
[   91.679874] Bluetooth: hci4: command 0x0419 tx timeout
[   91.742896] Bluetooth: hci7: command 0x0419 tx timeout
[   91.743939] Bluetooth: hci1: command 0x0419 tx timeout
[   91.744321] Bluetooth: hci6: command 0x0419 tx timeout
[   91.806884] Bluetooth: hci5: command 0x0419 tx timeout
[   91.807891] Bluetooth: hci3: command 0x0419 tx timeout
[   94.260642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   94.262974] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   94.266196] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   94.280987] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   94.312095] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   94.318270] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   94.327709] Bluetooth: hci2: HCI_REQ-0x0c1a
[   96.350935] Bluetooth: hci2: command 0x0409 tx timeout
[   98.399916] Bluetooth: hci2: command 0x041b tx timeout
[  100.446970] Bluetooth: hci2: command 0x040f tx timeout
[  102.494991] Bluetooth: hci2: command 0x0419 tx timeout
[  141.427711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.428611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.429877] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  141.492095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.492710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.494393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  141.741110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.741737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.743505] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  141.768147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.768740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.770311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  141.943040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.943683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.945167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  142.015154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.016003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.017404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  142.101235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.101950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.103358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  142.412471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.413632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.414875] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  145.332573] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  145.334663] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  145.336110] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  145.338730] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  145.341596] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  145.342941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  145.347913] Bluetooth: hci0: HCI_REQ-0x0c1a
[  145.635203] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  145.637549] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  145.639506] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  145.643321] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  145.645639] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  145.647321] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  145.652913] Bluetooth: hci1: HCI_REQ-0x0c1a
[  145.827336] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  145.829321] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  145.894731] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  145.918894] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  145.922997] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  145.927004] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  145.941895] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  145.944357] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  145.946047] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  145.947261] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  145.949221] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  145.955853] Bluetooth: hci3: HCI_REQ-0x0c1a
[  145.974981] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  145.980759] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  145.981688] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  145.991179] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  145.995272] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  145.996861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  145.999529] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  146.007175] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  146.008515] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  146.013532] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  146.014524] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  146.015955] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  146.017484] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  146.020140] Bluetooth: hci6: HCI_REQ-0x0c1a
[  146.023709] Bluetooth: hci4: HCI_REQ-0x0c1a
[  146.029067] Bluetooth: hci7: HCI_REQ-0x0c1a
[  147.359842] Bluetooth: hci0: command 0x0409 tx timeout
[  147.679890] Bluetooth: hci1: command 0x0409 tx timeout
[  147.871956] Bluetooth: hci5: Opcode 0x c03 failed: -110
[  147.998844] Bluetooth: hci3: command 0x0409 tx timeout
[  148.062854] Bluetooth: hci7: command 0x0409 tx timeout
[  148.063884] Bluetooth: hci4: command 0x0409 tx timeout
[  148.064442] Bluetooth: hci6: command 0x0409 tx timeout
[  148.399502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.400504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.401982] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  148.478643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.479393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.480955] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  149.184591] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure
12:31:39 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]})
capget(&(0x7f0000000000)={0x20071026}, 0x0)

12:31:39 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]})
capget(&(0x7f0000000000)={0x20071026}, 0x0)

[  149.406899] Bluetooth: hci0: command 0x041b tx timeout
12:31:39 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]})
capget(&(0x7f0000000000)={0x20071026}, 0x0)

12:31:39 executing program 1:
r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000100)='nl80211\x00', &(0x7f0000000140)='./file0/file0\x00', r2)

12:31:39 executing program 1:
r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000100)='nl80211\x00', &(0x7f0000000140)='./file0/file0\x00', r2)

[  149.728403] Bluetooth: hci1: command 0x041b tx timeout
12:31:39 executing program 1:
r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000100)='nl80211\x00', &(0x7f0000000140)='./file0/file0\x00', r2)

12:31:39 executing program 1:
r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000100)='nl80211\x00', &(0x7f0000000140)='./file0/file0\x00', r2)

12:31:39 executing program 1:
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x3, 0xbb, 0x40, 0x5, 0x0, 0x5, 0x2000, 0xa, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0xfffffffffffffff8}, 0x40000, 0x2, 0x2, 0x1, 0xfffffffffffff800, 0x3e3310b9, 0xb0f, 0x0, 0x8, 0x0, 0x4}, 0x0, 0x8, r1, 0x3)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_enter(r2, 0x2bd, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x2, 0x40, 0x2, 0x1, 0x0, 0xff, 0x28, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x4b}, 0x54000, 0x7fff, 0x4, 0x3, 0x5, 0x7f, 0x1, 0x0, 0x10001}, 0x0, 0x10, r1, 0xa)

[  150.046823] Bluetooth: hci3: command 0x041b tx timeout
[  150.058700] audit: type=1400 audit(1667219499.964:7): avc:  denied  { open } for  pid=4179 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  150.060520] audit: type=1400 audit(1667219499.964:8): avc:  denied  { kernel } for  pid=4179 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  150.111956] Bluetooth: hci6: command 0x041b tx timeout
[  150.112417] Bluetooth: hci4: command 0x041b tx timeout
[  150.112818] Bluetooth: hci7: command 0x041b tx timeout
[  150.824376] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  150.826733] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  150.827856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  150.837284] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  150.838467] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  150.851237] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  150.856733] Bluetooth: hci5: HCI_REQ-0x0c1a
[  151.454830] Bluetooth: hci0: command 0x040f tx timeout
[  151.775835] Bluetooth: hci1: command 0x040f tx timeout
[  152.095931] Bluetooth: hci3: command 0x040f tx timeout
[  152.159937] Bluetooth: hci7: command 0x040f tx timeout
[  152.160369] Bluetooth: hci4: command 0x040f tx timeout
[  152.160727] Bluetooth: hci6: command 0x040f tx timeout
[  152.862959] Bluetooth: hci5: command 0x0409 tx timeout
[  153.503824] Bluetooth: hci0: command 0x0419 tx timeout
[  153.822838] Bluetooth: hci1: command 0x0419 tx timeout
[  154.142918] Bluetooth: hci3: command 0x0419 tx timeout
[  154.206871] Bluetooth: hci6: command 0x0419 tx timeout
[  154.207370] Bluetooth: hci4: command 0x0419 tx timeout
[  154.207874] Bluetooth: hci7: command 0x0419 tx timeout
[  154.910897] Bluetooth: hci5: command 0x041b tx timeout
[  156.959833] Bluetooth: hci5: command 0x040f tx timeout
[  159.006880] Bluetooth: hci5: command 0x0419 tx timeout
[  194.455300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.456266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.457682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  194.594864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.595484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.597114] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  195.124561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.125197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.126931] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  195.266416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.267082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.268695] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  195.321486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.322166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.323725] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  195.439136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.439997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.441370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  195.630580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.631266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.633191] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  195.709703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.710366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.711688] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  196.023837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.024485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.028033] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  196.142295] device syz_tun entered promiscuous mode
[  196.143806] device syz_tun left promiscuous mode
[  196.150231] device syz_tun entered promiscuous mode
[  196.150768] device syz_tun left promiscuous mode
[  196.186793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.187459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.188830] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  196.190985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.191539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.192709] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  196.254814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.255427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.256806] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  196.386792] hrtimer: interrupt took 17202 ns
[  196.456100] audit: type=1400 audit(1667219546.360:9): avc:  denied  { tracepoint } for  pid=7050 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  197.614335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.615165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.616612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  197.642491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.643663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.645761] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
12:32:27 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
getuid()
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000005d80)={{0x1, 0x1, 0x18, r0, {0x5}}, '\x00'})
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000240)={0x90000000})

12:32:27 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xa015000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = gettid()
r1 = gettid()
kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)

12:32:27 executing program 1:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f00000011c0), 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00')
preadv(r1, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x18b0c2, 0x21)
fcntl$dupfd(0xffffffffffffffff, 0x0, r2)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000011c0)=ANY=[@ANYBLOB="00000004010000001c000000", @ANYRES32=<r3=>r0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
pwritev2(r3, &(0x7f0000001280)=[{&(0x7f0000001200)="bd132883c011cf1e700dfcaf193e44f33ca61910372558e54582219183aee0c171cc8d3c2321d1ec7ac3228b662c6cce83ae27ceb249be1957e2c0f3c8e3334049c347bae2c7d5911c23804af7bb358a54a7e7c13f744da4237b49e4807be7793e02e63532c0ff570528d662cda7a88f3eb89f0303cc3a0004ef6d69", 0x7c}], 0x1, 0x1, 0x7fffffff, 0x1)
write(r2, &(0x7f0000000080)="01", 0x41030)
close(r2)
r4 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r4, {0x7}}, './file1\x00'})
bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r6, 0x6, 0x1, 0x0, &(0x7f00000000c0))

12:32:27 executing program 4:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0)
mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}})
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)={r2, r3+10000000})
fchmod(r0, 0x20)
r4 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="240000002e00210e00000000000000008e274d9475aab6f2cc4ee871c6501083871a66dffe038890000000"], 0x24}], 0x1}, 0x0)
mq_timedsend(r1, &(0x7f00000001c0)="50fe9f66c66c32a647ffb706d473b58ef9ef7908b1dc675404ea91177a7ac87841aec5f7ab72c3db12118b51827f20ca639bdf896b9e07c4b6306d2fd86a5ef08ae62a0a9f816cadfd30ab9a44a6369e8e0d4d8e8ecedfcb178da8a91c5061298f9ea633172307e940c7e6479682326b1d1f940c5de6eada6a65b6c16541a550500eeede32f63ab476ed4357f2f03700be2eeaa6ab40567b9db2970d2d985fc921d77509620f5066703f7d9cac", 0xad, 0x8, &(0x7f0000000280)={0x0, 0x989680})

12:32:27 executing program 6:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
getuid()
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000005d80)={{0x1, 0x1, 0x18, r0, {0x5}}, '\x00'})
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000240)={0x90000000})

12:32:27 executing program 7:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={r1, 0x1, 0x6, @link_local}, 0x10)

12:32:27 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff}, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:32:27 executing program 2:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="03", 0x1}], 0x5, 0x0, 0x0)

[  198.119304] device syz_tun entered promiscuous mode
[  198.120752] device syz_tun left promiscuous mode
[  198.233762] loop5: detected capacity change from 0 to 40
12:32:28 executing program 7:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={r1, 0x1, 0x6, @link_local}, 0x10)

12:32:28 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff}, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:32:28 executing program 2:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="03", 0x1}], 0x5, 0x0, 0x0)

[  198.386186] device syz_tun entered promiscuous mode
[  198.389712] device syz_tun left promiscuous mode
12:32:28 executing program 4:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0)
mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}})
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)={r2, r3+10000000})
fchmod(r0, 0x20)
r4 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="240000002e00210e00000000000000008e274d9475aab6f2cc4ee871c6501083871a66dffe038890000000"], 0x24}], 0x1}, 0x0)
mq_timedsend(r1, &(0x7f00000001c0)="50fe9f66c66c32a647ffb706d473b58ef9ef7908b1dc675404ea91177a7ac87841aec5f7ab72c3db12118b51827f20ca639bdf896b9e07c4b6306d2fd86a5ef08ae62a0a9f816cadfd30ab9a44a6369e8e0d4d8e8ecedfcb178da8a91c5061298f9ea633172307e940c7e6479682326b1d1f940c5de6eada6a65b6c16541a550500eeede32f63ab476ed4357f2f03700be2eeaa6ab40567b9db2970d2d985fc921d77509620f5066703f7d9cac", 0xad, 0x8, &(0x7f0000000280)={0x0, 0x989680})

12:32:28 executing program 7:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={r1, 0x1, 0x6, @link_local}, 0x10)

12:32:28 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0)
mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}})
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)={r2, r3+10000000})
fchmod(r0, 0x20)
r4 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="240000002e00210e00000000000000008e274d9475aab6f2cc4ee871c6501083871a66dffe038890000000"], 0x24}], 0x1}, 0x0)
mq_timedsend(r1, &(0x7f00000001c0)="50fe9f66c66c32a647ffb706d473b58ef9ef7908b1dc675404ea91177a7ac87841aec5f7ab72c3db12118b51827f20ca639bdf896b9e07c4b6306d2fd86a5ef08ae62a0a9f816cadfd30ab9a44a6369e8e0d4d8e8ecedfcb178da8a91c5061298f9ea633172307e940c7e6479682326b1d1f940c5de6eada6a65b6c16541a550500eeede32f63ab476ed4357f2f03700be2eeaa6ab40567b9db2970d2d985fc921d77509620f5066703f7d9cac", 0xad, 0x8, &(0x7f0000000280)={0x0, 0x989680})

[  198.707918] device syz_tun entered promiscuous mode
[  198.708860] device syz_tun left promiscuous mode
12:32:28 executing program 2:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="03", 0x1}], 0x5, 0x0, 0x0)

12:32:28 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff}, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  198.915060] loop1: detected capacity change from 0 to 256
[  198.937112] loop1: detected capacity change from 0 to 256
12:32:28 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
getuid()
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000005d80)={{0x1, 0x1, 0x18, r0, {0x5}}, '\x00'})
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000240)={0x90000000})

12:32:28 executing program 4:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0)
mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}})
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)={r2, r3+10000000})
fchmod(r0, 0x20)
r4 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="240000002e00210e00000000000000008e274d9475aab6f2cc4ee871c6501083871a66dffe038890000000"], 0x24}], 0x1}, 0x0)
mq_timedsend(r1, &(0x7f00000001c0)="50fe9f66c66c32a647ffb706d473b58ef9ef7908b1dc675404ea91177a7ac87841aec5f7ab72c3db12118b51827f20ca639bdf896b9e07c4b6306d2fd86a5ef08ae62a0a9f816cadfd30ab9a44a6369e8e0d4d8e8ecedfcb178da8a91c5061298f9ea633172307e940c7e6479682326b1d1f940c5de6eada6a65b6c16541a550500eeede32f63ab476ed4357f2f03700be2eeaa6ab40567b9db2970d2d985fc921d77509620f5066703f7d9cac", 0xad, 0x8, &(0x7f0000000280)={0x0, 0x989680})

12:32:28 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0)
mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}})
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)={r2, r3+10000000})
fchmod(r0, 0x20)
r4 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="240000002e00210e00000000000000008e274d9475aab6f2cc4ee871c6501083871a66dffe038890000000"], 0x24}], 0x1}, 0x0)
mq_timedsend(r1, &(0x7f00000001c0)="50fe9f66c66c32a647ffb706d473b58ef9ef7908b1dc675404ea91177a7ac87841aec5f7ab72c3db12118b51827f20ca639bdf896b9e07c4b6306d2fd86a5ef08ae62a0a9f816cadfd30ab9a44a6369e8e0d4d8e8ecedfcb178da8a91c5061298f9ea633172307e940c7e6479682326b1d1f940c5de6eada6a65b6c16541a550500eeede32f63ab476ed4357f2f03700be2eeaa6ab40567b9db2970d2d985fc921d77509620f5066703f7d9cac", 0xad, 0x8, &(0x7f0000000280)={0x0, 0x989680})

12:32:28 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
getuid()
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000005d80)={{0x1, 0x1, 0x18, r0, {0x5}}, '\x00'})
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000240)={0x90000000})

12:32:28 executing program 6:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
getuid()
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000005d80)={{0x1, 0x1, 0x18, r0, {0x5}}, '\x00'})
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000240)={0x90000000})

12:32:28 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
getuid()
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000005d80)={{0x1, 0x1, 0x18, r0, {0x5}}, '\x00'})
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000240)={0x90000000})

12:32:28 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
getuid()
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000005d80)={{0x1, 0x1, 0x18, r0, {0x5}}, '\x00'})
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000240)={0x90000000})

12:32:28 executing program 1:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f00000011c0), 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00')
preadv(r1, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x18b0c2, 0x21)
fcntl$dupfd(0xffffffffffffffff, 0x0, r2)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000011c0)=ANY=[@ANYBLOB="00000004010000001c000000", @ANYRES32=<r3=>r0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
pwritev2(r3, &(0x7f0000001280)=[{&(0x7f0000001200)="bd132883c011cf1e700dfcaf193e44f33ca61910372558e54582219183aee0c171cc8d3c2321d1ec7ac3228b662c6cce83ae27ceb249be1957e2c0f3c8e3334049c347bae2c7d5911c23804af7bb358a54a7e7c13f744da4237b49e4807be7793e02e63532c0ff570528d662cda7a88f3eb89f0303cc3a0004ef6d69", 0x7c}], 0x1, 0x1, 0x7fffffff, 0x1)
write(r2, &(0x7f0000000080)="01", 0x41030)
close(r2)
r4 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r4, {0x7}}, './file1\x00'})
bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r6, 0x6, 0x1, 0x0, &(0x7f00000000c0))

12:32:28 executing program 4:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0)
mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}})
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)={r2, r3+10000000})
fchmod(r0, 0x20)
r4 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="240000002e00210e00000000000000008e274d9475aab6f2cc4ee871c6501083871a66dffe038890000000"], 0x24}], 0x1}, 0x0)
mq_timedsend(r1, &(0x7f00000001c0)="50fe9f66c66c32a647ffb706d473b58ef9ef7908b1dc675404ea91177a7ac87841aec5f7ab72c3db12118b51827f20ca639bdf896b9e07c4b6306d2fd86a5ef08ae62a0a9f816cadfd30ab9a44a6369e8e0d4d8e8ecedfcb178da8a91c5061298f9ea633172307e940c7e6479682326b1d1f940c5de6eada6a65b6c16541a550500eeede32f63ab476ed4357f2f03700be2eeaa6ab40567b9db2970d2d985fc921d77509620f5066703f7d9cac", 0xad, 0x8, &(0x7f0000000280)={0x0, 0x989680})

12:32:28 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0)
mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}})
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)={r2, r3+10000000})
fchmod(r0, 0x20)
r4 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="240000002e00210e00000000000000008e274d9475aab6f2cc4ee871c6501083871a66dffe038890000000"], 0x24}], 0x1}, 0x0)
mq_timedsend(r1, &(0x7f00000001c0)="50fe9f66c66c32a647ffb706d473b58ef9ef7908b1dc675404ea91177a7ac87841aec5f7ab72c3db12118b51827f20ca639bdf896b9e07c4b6306d2fd86a5ef08ae62a0a9f816cadfd30ab9a44a6369e8e0d4d8e8ecedfcb178da8a91c5061298f9ea633172307e940c7e6479682326b1d1f940c5de6eada6a65b6c16541a550500eeede32f63ab476ed4357f2f03700be2eeaa6ab40567b9db2970d2d985fc921d77509620f5066703f7d9cac", 0xad, 0x8, &(0x7f0000000280)={0x0, 0x989680})

[  199.118641] loop1: detected capacity change from 0 to 256
12:32:29 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f00000011c0), 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00')
preadv(r1, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x18b0c2, 0x21)
fcntl$dupfd(0xffffffffffffffff, 0x0, r2)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000011c0)=ANY=[@ANYBLOB="00000004010000001c000000", @ANYRES32=<r3=>r0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
pwritev2(r3, &(0x7f0000001280)=[{&(0x7f0000001200)="bd132883c011cf1e700dfcaf193e44f33ca61910372558e54582219183aee0c171cc8d3c2321d1ec7ac3228b662c6cce83ae27ceb249be1957e2c0f3c8e3334049c347bae2c7d5911c23804af7bb358a54a7e7c13f744da4237b49e4807be7793e02e63532c0ff570528d662cda7a88f3eb89f0303cc3a0004ef6d69", 0x7c}], 0x1, 0x1, 0x7fffffff, 0x1)
write(r2, &(0x7f0000000080)="01", 0x41030)
close(r2)
r4 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r4, {0x7}}, './file1\x00'})
bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r6, 0x6, 0x1, 0x0, &(0x7f00000000c0))

12:32:29 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
getuid()
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000005d80)={{0x1, 0x1, 0x18, r0, {0x5}}, '\x00'})
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000240)={0x90000000})

12:32:29 executing program 1:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f00000011c0), 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00')
preadv(r1, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x18b0c2, 0x21)
fcntl$dupfd(0xffffffffffffffff, 0x0, r2)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000011c0)=ANY=[@ANYBLOB="00000004010000001c000000", @ANYRES32=<r3=>r0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
pwritev2(r3, &(0x7f0000001280)=[{&(0x7f0000001200)="bd132883c011cf1e700dfcaf193e44f33ca61910372558e54582219183aee0c171cc8d3c2321d1ec7ac3228b662c6cce83ae27ceb249be1957e2c0f3c8e3334049c347bae2c7d5911c23804af7bb358a54a7e7c13f744da4237b49e4807be7793e02e63532c0ff570528d662cda7a88f3eb89f0303cc3a0004ef6d69", 0x7c}], 0x1, 0x1, 0x7fffffff, 0x1)
write(r2, &(0x7f0000000080)="01", 0x41030)
close(r2)
r4 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r4, {0x7}}, './file1\x00'})
bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r6, 0x6, 0x1, 0x0, &(0x7f00000000c0))

12:32:29 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
getuid()
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000005d80)={{0x1, 0x1, 0x18, r0, {0x5}}, '\x00'})
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000240)={0x90000000})

12:32:29 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f00000011c0), 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00')
preadv(r1, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x18b0c2, 0x21)
fcntl$dupfd(0xffffffffffffffff, 0x0, r2)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000011c0)=ANY=[@ANYBLOB="00000004010000001c000000", @ANYRES32=<r3=>r0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
pwritev2(r3, &(0x7f0000001280)=[{&(0x7f0000001200)="bd132883c011cf1e700dfcaf193e44f33ca61910372558e54582219183aee0c171cc8d3c2321d1ec7ac3228b662c6cce83ae27ceb249be1957e2c0f3c8e3334049c347bae2c7d5911c23804af7bb358a54a7e7c13f744da4237b49e4807be7793e02e63532c0ff570528d662cda7a88f3eb89f0303cc3a0004ef6d69", 0x7c}], 0x1, 0x1, 0x7fffffff, 0x1)
write(r2, &(0x7f0000000080)="01", 0x41030)
close(r2)
r4 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r4, {0x7}}, './file1\x00'})
bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r6, 0x6, 0x1, 0x0, &(0x7f00000000c0))

[  199.390591] loop5: detected capacity change from 0 to 256
[  199.506452] loop1: detected capacity change from 0 to 256
[  199.670012] loop4: detected capacity change from 0 to 256
12:32:29 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
getuid()
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000005d80)={{0x1, 0x1, 0x18, r0, {0x5}}, '\x00'})
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000240)={0x90000000})

12:32:29 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f00000011c0), 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00')
preadv(r1, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x18b0c2, 0x21)
fcntl$dupfd(0xffffffffffffffff, 0x0, r2)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000011c0)=ANY=[@ANYBLOB="00000004010000001c000000", @ANYRES32=<r3=>r0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
pwritev2(r3, &(0x7f0000001280)=[{&(0x7f0000001200)="bd132883c011cf1e700dfcaf193e44f33ca61910372558e54582219183aee0c171cc8d3c2321d1ec7ac3228b662c6cce83ae27ceb249be1957e2c0f3c8e3334049c347bae2c7d5911c23804af7bb358a54a7e7c13f744da4237b49e4807be7793e02e63532c0ff570528d662cda7a88f3eb89f0303cc3a0004ef6d69", 0x7c}], 0x1, 0x1, 0x7fffffff, 0x1)
write(r2, &(0x7f0000000080)="01", 0x41030)
close(r2)
r4 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r4, {0x7}}, './file1\x00'})
bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r6, 0x6, 0x1, 0x0, &(0x7f00000000c0))

12:32:29 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
getuid()
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000005d80)={{0x1, 0x1, 0x18, r0, {0x5}}, '\x00'})
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000240)={0x90000000})

12:32:29 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f00000011c0), 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00')
preadv(r1, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x18b0c2, 0x21)
fcntl$dupfd(0xffffffffffffffff, 0x0, r2)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000011c0)=ANY=[@ANYBLOB="00000004010000001c000000", @ANYRES32=<r3=>r0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
pwritev2(r3, &(0x7f0000001280)=[{&(0x7f0000001200)="bd132883c011cf1e700dfcaf193e44f33ca61910372558e54582219183aee0c171cc8d3c2321d1ec7ac3228b662c6cce83ae27ceb249be1957e2c0f3c8e3334049c347bae2c7d5911c23804af7bb358a54a7e7c13f744da4237b49e4807be7793e02e63532c0ff570528d662cda7a88f3eb89f0303cc3a0004ef6d69", 0x7c}], 0x1, 0x1, 0x7fffffff, 0x1)
write(r2, &(0x7f0000000080)="01", 0x41030)
close(r2)
r4 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r4, {0x7}}, './file1\x00'})
bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r6, 0x6, 0x1, 0x0, &(0x7f00000000c0))

12:32:29 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
getuid()
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000005d80)={{0x1, 0x1, 0x18, r0, {0x5}}, '\x00'})
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000240)={0x90000000})

12:32:29 executing program 1:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f00000011c0), 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00')
preadv(r1, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x18b0c2, 0x21)
fcntl$dupfd(0xffffffffffffffff, 0x0, r2)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000011c0)=ANY=[@ANYBLOB="00000004010000001c000000", @ANYRES32=<r3=>r0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
pwritev2(r3, &(0x7f0000001280)=[{&(0x7f0000001200)="bd132883c011cf1e700dfcaf193e44f33ca61910372558e54582219183aee0c171cc8d3c2321d1ec7ac3228b662c6cce83ae27ceb249be1957e2c0f3c8e3334049c347bae2c7d5911c23804af7bb358a54a7e7c13f744da4237b49e4807be7793e02e63532c0ff570528d662cda7a88f3eb89f0303cc3a0004ef6d69", 0x7c}], 0x1, 0x1, 0x7fffffff, 0x1)
write(r2, &(0x7f0000000080)="01", 0x41030)
close(r2)
r4 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r4, {0x7}}, './file1\x00'})
bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r6, 0x6, 0x1, 0x0, &(0x7f00000000c0))

12:32:29 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
getuid()
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000005d80)={{0x1, 0x1, 0x18, r0, {0x5}}, '\x00'})
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000240)={0x90000000})

12:32:29 executing program 6:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
getuid()
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000005d80)={{0x1, 0x1, 0x18, r0, {0x5}}, '\x00'})
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000240)={0x90000000})

[  199.963263] loop1: detected capacity change from 0 to 256
12:32:29 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
getuid()
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000005d80)={{0x1, 0x1, 0x18, r0, {0x5}}, '\x00'})
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000240)={0x90000000})

[  200.133512] loop4: detected capacity change from 0 to 256
[  200.139373] loop5: detected capacity change from 0 to 256
12:32:30 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
getuid()
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000005d80)={{0x1, 0x1, 0x18, r0, {0x5}}, '\x00'})
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000240)={0x90000000})

12:32:30 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f00000011c0), 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00')
preadv(r1, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x18b0c2, 0x21)
fcntl$dupfd(0xffffffffffffffff, 0x0, r2)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000011c0)=ANY=[@ANYBLOB="00000004010000001c000000", @ANYRES32=<r3=>r0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
pwritev2(r3, &(0x7f0000001280)=[{&(0x7f0000001200)="bd132883c011cf1e700dfcaf193e44f33ca61910372558e54582219183aee0c171cc8d3c2321d1ec7ac3228b662c6cce83ae27ceb249be1957e2c0f3c8e3334049c347bae2c7d5911c23804af7bb358a54a7e7c13f744da4237b49e4807be7793e02e63532c0ff570528d662cda7a88f3eb89f0303cc3a0004ef6d69", 0x7c}], 0x1, 0x1, 0x7fffffff, 0x1)
write(r2, &(0x7f0000000080)="01", 0x41030)
close(r2)
r4 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r4, {0x7}}, './file1\x00'})
bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r6, 0x6, 0x1, 0x0, &(0x7f00000000c0))

12:32:30 executing program 7:
r0 = socket$inet6(0xa, 0x1, 0x0)
fadvise64(r0, 0x0, 0xfffffffffffffff8, 0x0)

12:32:30 executing program 6:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x11, 0x0, &(0x7f0000000000)={@dev, @broadcast}, 0xc)

12:32:30 executing program 0:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x40242, 0x0)
statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x1000, 0x20, &(0x7f00000004c0))
bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @long={0x3, 0x3}}, 0x14)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x1, 0x0, 0x400}, 0x0, 0xffffffffffffffff, r0, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x80, &(0x7f00000003c0))
bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @long={0x3, 0x3}}, 0x14)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000080)=""/91, &(0x7f0000000000)=0x5b)
openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x9)
pwritev2(r1, 0x0, 0x0, 0x5, 0xffffffb4, 0x5)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)

12:32:30 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
setsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

12:32:30 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f00000011c0), 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00')
preadv(r1, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x18b0c2, 0x21)
fcntl$dupfd(0xffffffffffffffff, 0x0, r2)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000011c0)=ANY=[@ANYBLOB="00000004010000001c000000", @ANYRES32=<r3=>r0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
pwritev2(r3, &(0x7f0000001280)=[{&(0x7f0000001200)="bd132883c011cf1e700dfcaf193e44f33ca61910372558e54582219183aee0c171cc8d3c2321d1ec7ac3228b662c6cce83ae27ceb249be1957e2c0f3c8e3334049c347bae2c7d5911c23804af7bb358a54a7e7c13f744da4237b49e4807be7793e02e63532c0ff570528d662cda7a88f3eb89f0303cc3a0004ef6d69", 0x7c}], 0x1, 0x1, 0x7fffffff, 0x1)
write(r2, &(0x7f0000000080)="01", 0x41030)
close(r2)
r4 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r4, {0x7}}, './file1\x00'})
bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r6, 0x6, 0x1, 0x0, &(0x7f00000000c0))

12:32:30 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
getuid()
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000005d80)={{0x1, 0x1, 0x18, r0, {0x5}}, '\x00'})
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000240)={0x90000000})

12:32:30 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x14, 0x1, 0x4, 0x101}, 0x14}}, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f0000001000)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80)

[  200.648352] random: crng reseeded on system resumption
12:32:30 executing program 6:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/199, 0xc7}], 0x1, 0x0, 0x0)

[  200.678250] loop4: detected capacity change from 0 to 256
12:32:30 executing program 7:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x20}}, 0x0)

[  200.696379] Restarting kernel threads ... done.
[  200.747383] loop5: detected capacity change from 0 to 256
[  201.414387] BUG: unable to handle page fault for address: ffffed100fffc000
[  201.415028] #PF: supervisor write access in kernel mode
[  201.415475] #PF: error_code(0x0002) - not-present page
[  201.415877] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0
[  201.417120] Oops: 0002 [#1] PREEMPT SMP KASAN NOPTI
[  201.418133] CPU: 1 PID: 7234 Comm: syz-executor.0 Not tainted 6.1.0-rc3-next-20221031 #1
[  201.419986] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  201.420942] RIP: 0010:__memset+0x24/0x50
[  201.421280] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  201.422883] RSP: 0018:ffff888039b47cc0 EFLAGS: 00010212
[  201.423432] RAX: 0000000000000000 RBX: ffff88800bff00c0 RCX: 1ffffe21fe5ffe26
[  201.424137] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  201.424797] RBP: ffff88800bfe88c0 R08: 0000000000000005 R09: ffffed10017fe018
[  201.425452] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800bfe88c0
[  201.426101] R13: ffff88800bff00c0 R14: ffffffff815f27a0 R15: 1ffff11001122a1f
[  201.426761] FS:  00007f1f1ee86700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000
[  201.427492] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  201.428029] CR2: ffffed100fffc000 CR3: 0000000038fd0000 CR4: 0000000000350ee0
[  201.428689] Call Trace:
[  201.428963]  <TASK>
[  201.429176]  kasan_unpoison+0x23/0x60
[  201.429550]  mempool_exit+0x1c2/0x330
[  201.429920]  bioset_exit+0x2c9/0x630
[  201.430286]  disk_release+0x143/0x490
[  201.430650]  ? disk_release+0x0/0x490
[  201.431023]  ? device_release+0x0/0x250
[  201.431431]  device_release+0xa2/0x250
[  201.431838]  ? device_release+0x0/0x250
[  201.432250]  kobject_put+0x173/0x280
[  201.432646]  put_device+0x1b/0x40
[  201.433037]  put_disk+0x41/0x60
[  201.433339]  loop_control_ioctl+0x4d1/0x630
[  201.433641]  ? loop_control_ioctl+0x0/0x630
[  201.433939]  ? selinux_file_ioctl+0xb1/0x270
[  201.434253]  ? selinux_file_ioctl+0x2/0x270
[  201.434555]  ? loop_control_ioctl+0x0/0x630
[  201.434854]  __x64_sys_ioctl+0x19a/0x220
[  201.435138]  do_syscall_64+0x3b/0xa0
[  201.435396]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[  201.435743] RIP: 0033:0x7f1f21910b19
[  201.435998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  201.437187] RSP: 002b:00007f1f1ee86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  201.437686] RAX: ffffffffffffffda RBX: 00007f1f21a23f60 RCX: 00007f1f21910b19
[  201.438162] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000005
[  201.438642] RBP: 00007f1f2196af6d R08: 0000000000000000 R09: 0000000000000000
[  201.439192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  201.439783] R13: 00007ffd4273b34f R14: 00007f1f1ee86300 R15: 0000000000022000
[  201.440264]  </TASK>
[  201.440414] Modules linked in:
[  201.440629] CR2: ffffed100fffc000
[  201.440935] ---[ end trace 0000000000000000 ]---
[  201.441301] RIP: 0010:__memset+0x24/0x50
[  201.441567] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  201.442807] RSP: 0018:ffff888039b47cc0 EFLAGS: 00010212
[  201.443131] RAX: 0000000000000000 RBX: ffff88800bff00c0 RCX: 1ffffe21fe5ffe26
[  201.443594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  201.444156] RBP: ffff88800bfe88c0 R08: 0000000000000005 R09: ffffed10017fe018
[  201.444583] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800bfe88c0
[  201.445028] R13: ffff88800bff00c0 R14: ffffffff815f27a0 R15: 1ffff11001122a1f
[  201.445560] FS:  00007f1f1ee86700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000
[  201.446090] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  201.446443] CR2: ffffed100fffc000 CR3: 0000000038fd0000 CR4: 0000000000350ee0
[  201.470084] random: crng reseeded on system resumption
12:32:31 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x14, 0x1, 0x4, 0x101}, 0x14}}, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f0000001000)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80)

12:32:31 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000001280)='net/dev_mcast\x00')
preadv(r0, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/4095, 0xfff}], 0x1, 0x1000000, 0x0)

12:32:31 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="46efffff000000002e2f66696c653000"])
openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000001c0)={0x7f, 0x95, 0x20000000000, 0x1000, 0x0, 0x2})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000004c0))
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000180), &(0x7f0000000400)=0x4)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000140)={0x1, 'team0\x00', {}, 0x465})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', <r4=>0x0})
sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}], 0x20}, 0x0)

[  201.517231] loop5: detected capacity change from 0 to 40
12:32:31 executing program 6:
syz_mount_image$nfs(&(0x7f0000001880), &(0x7f00000018c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)={[{'\x05\x00\x00\x00'}]})

12:32:31 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lseek(r1, 0x0, 0x4)
openat(r1, &(0x7f0000000000)='./file1\x00', 0x151003, 0x1c0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
pwrite64(r2, &(0x7f00000000c0)='9', 0x1, 0x8040000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400020, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

12:32:31 executing program 0:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x40242, 0x0)
statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x1000, 0x20, &(0x7f00000004c0))
bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @long={0x3, 0x3}}, 0x14)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x1, 0x0, 0x400}, 0x0, 0xffffffffffffffff, r0, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x80, &(0x7f00000003c0))
bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @long={0x3, 0x3}}, 0x14)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000080)=""/91, &(0x7f0000000000)=0x5b)
openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x9)
pwritev2(r1, 0x0, 0x0, 0x5, 0xffffffb4, 0x5)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)

12:32:31 executing program 4:
syz_mount_image$iso9660(&(0x7f0000000900), &(0x7f0000000940)='./file0\x00', 0x0, 0x0, &(0x7f0000000c80), 0x0, &(0x7f0000000d00))

12:32:31 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
getuid()
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000005d80)={{0x1, 0x1, 0x18, r0, {0x5}}, '\x00'})
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000240)={0x90000000})

[  201.546730] syz-executor.5: attempt to access beyond end of device
[  201.546730] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[  201.547890] Buffer I/O error on dev loop5, logical block 31, lost async page write
[  201.591817] ISOFS: Unable to identify CD-ROM format.
12:32:31 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lseek(r1, 0x0, 0x4)
openat(r1, &(0x7f0000000000)='./file1\x00', 0x151003, 0x1c0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
pwrite64(r2, &(0x7f00000000c0)='9', 0x1, 0x8040000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400020, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

12:32:31 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x14, 0x1, 0x4, 0x101}, 0x14}}, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f0000001000)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80)

12:32:31 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x40242, 0x0)
statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x1000, 0x20, &(0x7f00000004c0))
bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @long={0x3, 0x3}}, 0x14)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x1, 0x0, 0x400}, 0x0, 0xffffffffffffffff, r0, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x80, &(0x7f00000003c0))
bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @long={0x3, 0x3}}, 0x14)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000080)=""/91, &(0x7f0000000000)=0x5b)
openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x9)
pwritev2(r1, 0x0, 0x0, 0x5, 0xffffffb4, 0x5)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)

12:32:31 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x40242, 0x0)
statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x1000, 0x20, &(0x7f00000004c0))
bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @long={0x3, 0x3}}, 0x14)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x1, 0x0, 0x400}, 0x0, 0xffffffffffffffff, r0, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x80, &(0x7f00000003c0))
bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @long={0x3, 0x3}}, 0x14)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000080)=""/91, &(0x7f0000000000)=0x5b)
openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x9)
pwritev2(r1, 0x0, 0x0, 0x5, 0xffffffb4, 0x5)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)

[  201.672660] random: crng reseeded on system resumption
12:32:31 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000001280)='net/dev_mcast\x00')
preadv(r0, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/4095, 0xfff}], 0x1, 0x1000000, 0x0)

12:32:31 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="46efffff000000002e2f66696c653000"])
openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000001c0)={0x7f, 0x95, 0x20000000000, 0x1000, 0x0, 0x2})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000004c0))
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000180), &(0x7f0000000400)=0x4)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000140)={0x1, 'team0\x00', {}, 0x465})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', <r4=>0x0})
sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}], 0x20}, 0x0)

[  201.708011] Restarting kernel threads ... done.
[  201.758233] random: crng reseeded on system resumption
12:32:31 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x40242, 0x0)
statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x1000, 0x20, &(0x7f00000004c0))
bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @long={0x3, 0x3}}, 0x14)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x1, 0x0, 0x400}, 0x0, 0xffffffffffffffff, r0, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x80, &(0x7f00000003c0))
bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @long={0x3, 0x3}}, 0x14)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000080)=""/91, &(0x7f0000000000)=0x5b)
openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x9)
pwritev2(r1, 0x0, 0x0, 0x5, 0xffffffb4, 0x5)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)

12:32:31 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x14, 0x1, 0x4, 0x101}, 0x14}}, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f0000001000)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80)

12:32:31 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000001280)='net/dev_mcast\x00')
preadv(r0, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/4095, 0xfff}], 0x1, 0x1000000, 0x0)

[  201.809378] Restarting kernel threads ... done.
12:32:31 executing program 0:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x40242, 0x0)
statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x1000, 0x20, &(0x7f00000004c0))
bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @long={0x3, 0x3}}, 0x14)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x1, 0x0, 0x400}, 0x0, 0xffffffffffffffff, r0, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x80, &(0x7f00000003c0))
bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @long={0x3, 0x3}}, 0x14)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000080)=""/91, &(0x7f0000000000)=0x5b)
openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x9)
pwritev2(r1, 0x0, 0x0, 0x5, 0xffffffb4, 0x5)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)

[  201.905563] random: crng reseeded on system resumption
[  201.913311] Restarting kernel threads ... done.
[  202.038054] BUG: unable to handle page fault for address: ffffed100fffc000
[  202.038653] #PF: supervisor write access in kernel mode
[  202.039063] #PF: error_code(0x0002) - not-present page
[  202.039471] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0
[  202.040008] Oops: 0002 [#2] PREEMPT SMP KASAN NOPTI
[  202.040393] CPU: 0 PID: 7299 Comm: syz-executor.4 Tainted: G      D            6.1.0-rc3-next-20221031 #1
[  202.041150] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  202.041799] RIP: 0010:__memset+0x24/0x50
[  202.042141] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  202.043802] RSP: 0018:ffff888042817cc0 EFLAGS: 00010212
[  202.044319] RAX: 0000000000000000 RBX: ffff88800bff0240 RCX: 1ffffe21fe5ffe2c
[  202.045008] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  202.045682] RBP: ffff88800bfe88c0 R08: 0000000000000005 R09: ffffed10017fe048
[  202.046358] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800bfe88c0
[  202.046944] R13: ffff88800bff0240 R14: ffffffff815f27a0 R15: 1ffff1100112261f
[  202.047502] FS:  00007ff7ef76d700(0000) GS:ffff88806d000000(0000) knlGS:0000000000000000
[  202.048132] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  202.048585] CR2: ffffed100fffc000 CR3: 0000000033d04000 CR4: 0000000000350ef0
[  202.049154] Call Trace:
[  202.049366]  <TASK>
[  202.049553]  kasan_unpoison+0x23/0x60
[  202.049881]  mempool_exit+0x1c2/0x330
[  202.050200]  bioset_exit+0x2c9/0x630
[  202.050508]  disk_release+0x143/0x490
[  202.050828]  ? disk_release+0x0/0x490
[  202.051142]  ? device_release+0x0/0x250
[  202.051457]  device_release+0xa2/0x250
[  202.051781]  ? device_release+0x0/0x250
[  202.052099]  kobject_put+0x173/0x280
[  202.052404]  put_device+0x1b/0x40
[  202.052690]  put_disk+0x41/0x60
[  202.052985]  loop_control_ioctl+0x4d1/0x630
[  202.053327]  ? loop_control_ioctl+0x0/0x630
[  202.053669]  ? selinux_file_ioctl+0xb1/0x270
[  202.054047]  ? loop_control_ioctl+0x0/0x630
[  202.054394]  __x64_sys_ioctl+0x19a/0x220
[  202.054722]  do_syscall_64+0x3b/0xa0
[  202.055043]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[  202.055456] RIP: 0033:0x7ff7f21f7b19
[  202.055747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  202.057145] RSP: 002b:00007ff7ef76d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  202.057725] RAX: ffffffffffffffda RBX: 00007ff7f230af60 RCX: 00007ff7f21f7b19
[  202.058302] RDX: 0000000000000001 RSI: 0000000000004c81 RDI: 0000000000000005
[  202.058867] RBP: 00007ff7f2251f6d R08: 0000000000000000 R09: 0000000000000000
[  202.059404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  202.059956] R13: 00007ffd4f72908f R14: 00007ff7ef76d300 R15: 0000000000022000
[  202.060518]  </TASK>
[  202.060704] Modules linked in:
[  202.060984] CR2: ffffed100fffc000
[  202.061269] ---[ end trace 0000000000000000 ]---
[  202.061635] RIP: 0010:__memset+0x24/0x50
[  202.061984] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  202.063397] RSP: 0018:ffff888039b47cc0 EFLAGS: 00010212
[  202.063818] RAX: 0000000000000000 RBX: ffff88800bff00c0 RCX: 1ffffe21fe5ffe26
[  202.064361] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  202.064922] RBP: ffff88800bfe88c0 R08: 0000000000000005 R09: ffffed10017fe018
[  202.065474] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800bfe88c0
[  202.066030] R13: ffff88800bff00c0 R14: ffffffff815f27a0 R15: 1ffff11001122a1f
[  202.066587] FS:  00007ff7ef76d700(0000) GS:ffff88806d000000(0000) knlGS:0000000000000000
[  202.067215] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  202.067663] CR2: ffffed100fffc000 CR3: 0000000033d04000 CR4: 0000000000350ef0
[  202.146071] BUG: unable to handle page fault for address: ffffed100fffc000
[  202.146633] #PF: supervisor write access in kernel mode
[  202.147018] #PF: error_code(0x0002) - not-present page
[  202.147394] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0
[  202.147883] Oops: 0002 [#3] PREEMPT SMP KASAN NOPTI
[  202.148289] CPU: 0 PID: 7301 Comm: syz-executor.0 Tainted: G      D            6.1.0-rc3-next-20221031 #1
[  202.149018] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  202.149568] RIP: 0010:__memset+0x24/0x50
[  202.149872] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  202.151097] RSP: 0018:ffff88803e6e7cc0 EFLAGS: 00010212
[  202.151466] RAX: 0000000000000000 RBX: ffff88800bff03c0 RCX: 1ffffe21fe5ffe32
[  202.151960] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  202.152449] RBP: ffff88800bfe88c0 R08: 0000000000000005 R09: ffffed10017fe078
[  202.152946] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800bfe88c0
[  202.153432] R13: ffff88800bff03c0 R14: ffffffff815f27a0 R15: 1ffff1100112221f
[  202.153919] FS:  00007f1f1ee86700(0000) GS:ffff88806d000000(0000) knlGS:0000000000000000
[  202.154471] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  202.154875] CR2: ffffed100fffc000 CR3: 0000000016862000 CR4: 0000000000350ef0
[  202.155364] Call Trace:
[  202.155553]  <TASK>
[  202.155714]  kasan_unpoison+0x23/0x60
[  202.155986]  mempool_exit+0x1c2/0x330
[  202.156272]  bioset_exit+0x2c9/0x630
[  202.156544]  disk_release+0x143/0x490
[  202.156838]  ? disk_release+0x0/0x490
[  202.157112]  ? device_release+0x0/0x250
[  202.157396]  device_release+0xa2/0x250
[  202.157678]  ? device_release+0x0/0x250
[  202.157958]  kobject_put+0x173/0x280
[  202.158222]  put_device+0x1b/0x40
[  202.158470]  put_disk+0x41/0x60
[  202.158710]  loop_control_ioctl+0x4d1/0x630
[  202.159015]  ? loop_control_ioctl+0x0/0x630
[  202.159317]  ? selinux_file_ioctl+0xb1/0x270
[  202.159640]  ? loop_control_ioctl+0x0/0x630
[  202.159955]  __x64_sys_ioctl+0x19a/0x220
[  202.160247]  do_syscall_64+0x3b/0xa0
[  202.160516]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[  202.160890] RIP: 0033:0x7f1f21910b19
[  202.161153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  202.162364] RSP: 002b:00007f1f1ee86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  202.162881] RAX: ffffffffffffffda RBX: 00007f1f21a23f60 RCX: 00007f1f21910b19
[  202.163367] RDX: 0000000000000002 RSI: 0000000000004c81 RDI: 0000000000000005
[  202.163853] RBP: 00007f1f2196af6d R08: 0000000000000000 R09: 0000000000000000
[  202.164346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  202.164833] R13: 00007ffd4273b34f R14: 00007f1f1ee86300 R15: 0000000000022000
[  202.165324]  </TASK>
[  202.165490] Modules linked in:
[  202.165719] CR2: ffffed100fffc000
[  202.165959] ---[ end trace 0000000000000000 ]---
[  202.166278] RIP: 0010:__memset+0x24/0x50
[  202.166571] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  202.167785] RSP: 0018:ffff888039b47cc0 EFLAGS: 00010212
[  202.168147] RAX: 0000000000000000 RBX: ffff88800bff00c0 RCX: 1ffffe21fe5ffe26
[  202.168633] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  202.169132] RBP: ffff88800bfe88c0 R08: 0000000000000005 R09: ffffed10017fe018
[  202.169615] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800bfe88c0
[  202.170098] R13: ffff88800bff00c0 R14: ffffffff815f27a0 R15: 1ffff11001122a1f
[  202.170585] FS:  00007f1f1ee86700(0000) GS:ffff88806d000000(0000) knlGS:0000000000000000
[  202.171123] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  202.171515] CR2: ffffed100fffc000 CR3: 0000000016862000 CR4: 0000000000350ef0
[  202.518163] syz-executor.5 (7282) used greatest stack depth: 23256 bytes left
12:32:32 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="46efffff000000002e2f66696c653000"])
openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000001c0)={0x7f, 0x95, 0x20000000000, 0x1000, 0x0, 0x2})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000004c0))
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000180), &(0x7f0000000400)=0x4)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000140)={0x1, 'team0\x00', {}, 0x465})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', <r4=>0x0})
sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}], 0x20}, 0x0)

12:32:32 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000001280)='net/dev_mcast\x00')
preadv(r0, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/4095, 0xfff}], 0x1, 0x1000000, 0x0)

12:32:32 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="46efffff000000002e2f66696c653000"])
openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000001c0)={0x7f, 0x95, 0x20000000000, 0x1000, 0x0, 0x2})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000004c0))
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000180), &(0x7f0000000400)=0x4)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000140)={0x1, 'team0\x00', {}, 0x465})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', <r4=>0x0})
sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}], 0x20}, 0x0)

12:32:32 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x40242, 0x0)
statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x1000, 0x20, &(0x7f00000004c0))
bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @long={0x3, 0x3}}, 0x14)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x1, 0x0, 0x400}, 0x0, 0xffffffffffffffff, r0, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x80, &(0x7f00000003c0))
bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @long={0x3, 0x3}}, 0x14)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000080)=""/91, &(0x7f0000000000)=0x5b)
openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x9)
pwritev2(r1, 0x0, 0x0, 0x5, 0xffffffb4, 0x5)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)

12:32:32 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x14, 0x1, 0x4, 0x101}, 0x14}}, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f0000001000)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80)

12:32:32 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lseek(r1, 0x0, 0x4)
openat(r1, &(0x7f0000000000)='./file1\x00', 0x151003, 0x1c0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
pwrite64(r2, &(0x7f00000000c0)='9', 0x1, 0x8040000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400020, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

12:32:32 executing program 0:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x40242, 0x0)
statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x1000, 0x20, &(0x7f00000004c0))
bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @long={0x3, 0x3}}, 0x14)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x1, 0x0, 0x400}, 0x0, 0xffffffffffffffff, r0, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x80, &(0x7f00000003c0))
bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @long={0x3, 0x3}}, 0x14)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000080)=""/91, &(0x7f0000000000)=0x5b)
openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x9)
pwritev2(r1, 0x0, 0x0, 0x5, 0xffffffb4, 0x5)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)

12:32:32 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x40242, 0x0)
statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x1000, 0x20, &(0x7f00000004c0))
bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @long={0x3, 0x3}}, 0x14)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x1, 0x0, 0x400}, 0x0, 0xffffffffffffffff, r0, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x80, &(0x7f00000003c0))
bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @long={0x3, 0x3}}, 0x14)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000080)=""/91, &(0x7f0000000000)=0x5b)
openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x9)
pwritev2(r1, 0x0, 0x0, 0x5, 0xffffffb4, 0x5)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)

[  202.773345] loop5: detected capacity change from 0 to 40
12:32:32 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x14, 0x1, 0x4, 0x101}, 0x14}}, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f0000001000)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80)

[  202.869491] random: crng reseeded on system resumption
[  202.880055] Restarting kernel threads ... done.
12:32:32 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x40242, 0x0)
statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x1000, 0x20, &(0x7f00000004c0))
bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @long={0x3, 0x3}}, 0x14)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x1, 0x0, 0x400}, 0x0, 0xffffffffffffffff, r0, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x80, &(0x7f00000003c0))
bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @long={0x3, 0x3}}, 0x14)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000080)=""/91, &(0x7f0000000000)=0x5b)
openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x9)
pwritev2(r1, 0x0, 0x0, 0x5, 0xffffffb4, 0x5)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)

[  203.004770] syz-executor.5: attempt to access beyond end of device
[  203.004770] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[  203.008651] Buffer I/O error on dev loop5, logical block 31, lost async page write
12:32:32 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x40242, 0x0)
statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x1000, 0x20, &(0x7f00000004c0))
bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @long={0x3, 0x3}}, 0x14)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x1, 0x0, 0x400}, 0x0, 0xffffffffffffffff, r0, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x80, &(0x7f00000003c0))
bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @long={0x3, 0x3}}, 0x14)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000080)=""/91, &(0x7f0000000000)=0x5b)
openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x9)
pwritev2(r1, 0x0, 0x0, 0x5, 0xffffffb4, 0x5)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)

12:32:33 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="46efffff000000002e2f66696c653000"])
openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000001c0)={0x7f, 0x95, 0x20000000000, 0x1000, 0x0, 0x2})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000004c0))
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000180), &(0x7f0000000400)=0x4)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000140)={0x1, 'team0\x00', {}, 0x465})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', <r4=>0x0})
sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}], 0x20}, 0x0)

[  203.713748] random: crng reseeded on system resumption
12:32:33 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x14, 0x1, 0x4, 0x101}, 0x14}}, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f0000001000)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80)

[  203.795684] Restarting kernel threads ... done.
12:32:33 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lseek(r1, 0x0, 0x4)
openat(r1, &(0x7f0000000000)='./file1\x00', 0x151003, 0x1c0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
pwrite64(r2, &(0x7f00000000c0)='9', 0x1, 0x8040000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400020, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[  203.876769] loop5: detected capacity change from 0 to 40
12:32:33 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000200000004f80000200040000000000000000000010000000000000002", 0x2d}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000011100))

12:32:33 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="46efffff000000002e2f66696c653000"])
openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000001c0)={0x7f, 0x95, 0x20000000000, 0x1000, 0x0, 0x2})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000004c0))
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000180), &(0x7f0000000400)=0x4)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000140)={0x1, 'team0\x00', {}, 0x465})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', <r4=>0x0})
sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}], 0x20}, 0x0)

12:32:33 executing program 6:
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540))
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001780), 0x0, 0x0)
pidfd_send_signal(r0, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pidfd_send_signal(r0, 0x26, &(0x7f00000017c0)={0xb, 0x0, 0x8000}, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r4, r3, 0x0, 0xfffffdef)
pidfd_send_signal(r3, 0x1d, &(0x7f0000001840)={0x33, 0x8001, 0x3ff}, 0x0)

[  204.020435] random: crng reseeded on system resumption
12:32:33 executing program 2:
keyctl$instantiate(0xc, 0x0, &(0x7f0000000a40)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:'}, 0x2a, 0x0)

12:32:34 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x40242, 0x0)
statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x1000, 0x20, &(0x7f00000004c0))
bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @long={0x3, 0x3}}, 0x14)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x1, 0x0, 0x400}, 0x0, 0xffffffffffffffff, r0, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x80, &(0x7f00000003c0))
bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @long={0x3, 0x3}}, 0x14)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000080)=""/91, &(0x7f0000000000)=0x5b)
openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x9)
pwritev2(r1, 0x0, 0x0, 0x5, 0xffffffb4, 0x5)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)

[  204.331075] random: crng reseeded on system resumption
[  204.339885] Restarting kernel threads ... done.
[  204.409757] BUG: unable to handle page fault for address: ffffed100fffc000
[  204.410243] #PF: supervisor write access in kernel mode
[  204.410591] #PF: error_code(0x0002) - not-present page
[  204.410944] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0
[  204.411400] Oops: 0002 [#4] PREEMPT SMP KASAN NOPTI
[  204.411739] CPU: 0 PID: 7362 Comm: syz-executor.1 Tainted: G      D            6.1.0-rc3-next-20221031 #1
[  204.412376] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  204.412932] RIP: 0010:__memset+0x24/0x50
[  204.413230] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  204.414445] RSP: 0018:ffff8880380f7cc0 EFLAGS: 00010212
[  204.414807] RAX: 0000000000000000 RBX: ffff88800bff0540 RCX: 1ffffe21fe5ffe38
[  204.415302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  204.415788] RBP: ffff88800bfe88c0 R08: 0000000000000005 R09: ffffed10017fe0a8
[  204.416264] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800bfe88c0
[  204.416742] R13: ffff88800bff0540 R14: ffffffff815f27a0 R15: 1ffff11001124e1f
[  204.417230] FS:  00007f1b15ccb700(0000) GS:ffff88806d000000(0000) knlGS:0000000000000000
[  204.417766] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  204.418161] CR2: ffffed100fffc000 CR3: 000000003665a000 CR4: 0000000000350ef0
[  204.418643] Call Trace:
[  204.418822]  <TASK>
[  204.418982]  kasan_unpoison+0x23/0x60
[  204.419251]  mempool_exit+0x1c2/0x330
[  204.419523]  bioset_exit+0x2c9/0x630
[  204.419794]  disk_release+0x143/0x490
[  204.420061]  ? disk_release+0x0/0x490
[  204.420332]  ? device_release+0x0/0x250
[  204.420610]  device_release+0xa2/0x250
[  204.420902]  ? device_release+0x0/0x250
[  204.421176]  kobject_put+0x173/0x280
[  204.421441]  put_device+0x1b/0x40
[  204.421685]  put_disk+0x41/0x60
[  204.421924]  loop_control_ioctl+0x4d1/0x630
[  204.422228]  ? loop_control_ioctl+0x0/0x630
[  204.422531]  ? selinux_file_ioctl+0xb1/0x270
[  204.422852]  ? loop_control_ioctl+0x0/0x630
[  204.423156]  __x64_sys_ioctl+0x19a/0x220
[  204.423443]  do_syscall_64+0x3b/0xa0
[  204.423711]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[  204.424073] RIP: 0033:0x7f1b18755b19
[  204.424332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  204.425547] RSP: 002b:00007f1b15ccb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  204.426062] RAX: ffffffffffffffda RBX: 00007f1b18868f60 RCX: 00007f1b18755b19
[  204.426540] RDX: 0000000000000003 RSI: 0000000000004c81 RDI: 0000000000000005
[  204.427022] RBP: 00007f1b187aff6d R08: 0000000000000000 R09: 0000000000000000
[  204.427506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  204.427986] R13: 00007ffcb2c564cf R14: 00007f1b15ccb300 R15: 0000000000022000
[  204.428481]  </TASK>
[  204.428647] Modules linked in:
[  204.428879] CR2: ffffed100fffc000
[  204.429118] ---[ end trace 0000000000000000 ]---
[  204.429441] RIP: 0010:__memset+0x24/0x50
[  204.429734] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  204.430953] RSP: 0018:ffff888039b47cc0 EFLAGS: 00010212
[  204.431316] RAX: 0000000000000000 RBX: ffff88800bff00c0 RCX: 1ffffe21fe5ffe26
[  204.431799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  204.432281] RBP: ffff88800bfe88c0 R08: 0000000000000005 R09: ffffed10017fe018
[  204.432763] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800bfe88c0
[  204.433257] R13: ffff88800bff00c0 R14: ffffffff815f27a0 R15: 1ffff11001122a1f
[  204.433738] FS:  00007f1b15ccb700(0000) GS:ffff88806d000000(0000) knlGS:0000000000000000
[  204.434275] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  204.434666] CR2: ffffed100fffc000 CR3: 000000003665a000 CR4: 0000000000350ef0
[  204.587984] syz-executor.5: attempt to access beyond end of device
[  204.587984] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[  204.620677] Buffer I/O error on dev loop5, logical block 31, lost async page write
[  204.866404] syz-executor.6 (7368) used greatest stack depth: 23016 bytes left
12:32:34 executing program 4:
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x0, 0x0, 0x20, 0x81, 0x0, 0x89})
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500))
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300))
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340))
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f00000004c0))
r2 = syz_open_procfs$userns(0x0, &(0x7f0000000180))
ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0))
dup3(r0, r2, 0x80000)
epoll_create(0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x400000, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pidfd_open(0x0, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000004b80)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108)
sendfile(r3, 0xffffffffffffffff, &(0x7f0000000000)=0x3, 0x1)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

12:32:34 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

12:32:34 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x6887c51, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000580)="fe1fbb14d711163ee255f30502ab52fa22c0f6b59096b165a8f33ed55751b401e94bbcaf8931324f8bc5be664035f1e67c96aea3d5cfeda1ab4de847fa11e9a77a5e567fa2a39d9354ec8d619c1eeee07787ae397945a1119fcb3b248d6603f4d1443986c6ee39f1012fc09db873b35e988769ea733b62ddefc1986fcae3495794e25351f552e3fde821c23e811bebb72164fbe02f656c6b5fe079a0dadb8c2a573a66278650bff1740d41655c2e1ad9274f7139d6fe387916a78f05bb577cf10e21df9a3335a19ad01baa2abf424f670feafd666697e5b602aa7a3678a66d929c307c", 0xe3, 0x627b9f85}, {&(0x7f0000000680)="cf187bcda815b93ce208aa5b5a5047585060988c8147fb269f5fbe585a796db27ffba47431d33e6d8283b97a165da9fa3166eafe43c3dab83f4a06cbb42338673ad1d25bfc82cfd2026d5290e9f0", 0x4e, 0x8}, {&(0x7f0000000700)="4999165f7c136ef01d941a2249d7547030feda817d7558a5532142b7e9ce0dc46a1d0de81c4f0088b0155fd77f19831010d285687d1b4cae37ce2d3a58fd7d6267bbcf4b9bb2d05179770f857f5b96774eab74b0e6423186e778bb077d601486740c7548a01b149e83be99316c1ad287813854acdea60f8a5ef68b9d519ef4a857f14507ea6533e10bf88ef798f159f6febb172726913233ac4384b34bb9581e0c5c64265cfcc2b9580fa4d415a7541bdc398e5b3a1e71ee9959", 0xba, 0x9}, {0x0, 0x0, 0x922}, {&(0x7f0000000380)="df1c925423f7abfe", 0x8, 0x7}, {&(0x7f00000008c0)="44aaeb519e1410475470b4c82e3cd4b0b4394d72c9d0863d756294339bce2c4f0e7ca12df87fcf485fd64ac873c14b8287fd41abc05cf30c7d3d027786d945304664eafd722f0c8f5296a9273b11eb6231a2cc03b8805de166307f6f120c75ffc8a5afd4e2d1ca580129d218ad849cf82193cd23324339399de7", 0x7a, 0x3ff}, {&(0x7f0000000940)="03382a6ae732191f19943ea3949a67a6b5c599d2dee9c607a22fdb27d8ec899d0c40197a5cc4b10f473c9a331dc758026b447227842cca14db4708c976c2f4ba4e95258465d8b8ac66acaa8f544de315f573c67d5d7823b465bd506a8cc9796a", 0x60, 0x6}, {&(0x7f00000009c0)="4e8cc242a786c0", 0x7, 0xfffffffffffffffc}], 0x1000010, &(0x7f0000000b00)=ANY=[@ANYBLOB='dots,dots,sys_immutable,dots,discard,nodots=00000000000000000000002'])
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c)

12:32:34 executing program 0:
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0)

12:32:34 executing program 5:
munmap(&(0x7f0000ff9000/0x6000)=nil, 0x6000)
shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x0)

12:32:34 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="46efffff000000002e2f66696c653000"])
openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000001c0)={0x7f, 0x95, 0x20000000000, 0x1000, 0x0, 0x2})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000004c0))
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000180), &(0x7f0000000400)=0x4)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000140)={0x1, 'team0\x00', {}, 0x465})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', <r4=>0x0})
sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}], 0x20}, 0x0)

12:32:34 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x40242, 0x0)
statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x1000, 0x20, &(0x7f00000004c0))
bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @long={0x3, 0x3}}, 0x14)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x1, 0x0, 0x400}, 0x0, 0xffffffffffffffff, r0, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x80, &(0x7f00000003c0))
bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @long={0x3, 0x3}}, 0x14)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000080)=""/91, &(0x7f0000000000)=0x5b)
openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x9)
pwritev2(r1, 0x0, 0x0, 0x5, 0xffffffb4, 0x5)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)

[  205.122982] loop6: detected capacity change from 0 to 214078
[  205.130462] FAT-fs (loop6): Unrecognized mount option "nodots=00000000000000000000002" or missing value
12:32:35 executing program 7:
r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x20)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00')
renameat(0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file1\x00')
perf_event_open(&(0x7f0000000140)={0x6, 0x80, 0xff, 0x7f, 0x8, 0x8, 0x0, 0x5, 0x4410, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffff80, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x1200, 0x81, 0x20, 0x1, 0x9, 0xf5, 0x7, 0x0, 0x8}, 0x0, 0x6, 0xffffffffffffffff, 0x2)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x8, 0x5, 0x4, 0x0, 0x9, 0x40, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0xfffffffffffff001, 0xdd}, 0x10900, 0x100, 0x71, 0x5, 0xb0, 0x40, 0x101, 0x0, 0x7f, 0x0, 0x10001}, 0xffffffffffffffff, 0xc, r0, 0x0)
r2 = inotify_init1(0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
write$vga_arbiter(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="746172676574205043493a353a343a11"], 0x13)
r4 = socket$netlink(0x10, 0x3, 0x0)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000300))
dup2(r2, r1)

12:32:35 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

12:32:35 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000080), 0x4)

12:32:35 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
io_setup(0x2, &(0x7f0000000000)=<r1=>0x0)
r2 = eventfd2(0x0, 0x0)
io_submit(r1, 0x1, &(0x7f0000001a00)=[&(0x7f0000000080)={0x0, 0x0, 0xfe, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}])

12:32:35 executing program 5:
munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000)
pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)

[  205.433658] loop6: detected capacity change from 0 to 214078
[  205.530434] FAT-fs (loop6): Unrecognized mount option "nodots=00000000000000000000002" or missing value
[  205.568283] BUG: unable to handle page fault for address: ffffed100fffc000
[  205.568879] #PF: supervisor write access in kernel mode
[  205.569288] #PF: error_code(0x0002) - not-present page
[  205.569690] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0
[  205.570218] Oops: 0002 [#5] PREEMPT SMP KASAN NOPTI
[  205.570608] CPU: 0 PID: 7390 Comm: syz-executor.1 Tainted: G      D            6.1.0-rc3-next-20221031 #1
[  205.571332] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  205.571959] RIP: 0010:__memset+0x24/0x50
[  205.572300] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  205.573687] RSP: 0018:ffff888042587cc0 EFLAGS: 00010212
[  205.574101] RAX: 0000000000000000 RBX: ffff88800bff06c0 RCX: 1ffffe21fe5ffe3e
[  205.574647] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  205.575192] RBP: ffff88800bfe88c0 R08: 0000000000000005 R09: ffffed10017fe0d8
[  205.575735] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800bfe88c0
[  205.576280] R13: ffff88800bff06c0 R14: ffffffff815f27a0 R15: 1ffff11001124a1f
[  205.576846] FS:  00007f1b15caa700(0000) GS:ffff88806d000000(0000) knlGS:0000000000000000
[  205.577464] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  205.577916] CR2: ffffed100fffc000 CR3: 00000000199ce000 CR4: 0000000000350ef0
[  205.578465] Call Trace:
[  205.578673]  <TASK>
[  205.578857]  kasan_unpoison+0x23/0x60
[  205.579165]  mempool_exit+0x1c2/0x330
[  205.579478]  bioset_exit+0x2c9/0x630
[  205.579781]  ? _raw_spin_unlock+0x24/0x50
[  205.580120]  ? blkg_destroy_all.isra.0+0x157/0x230
[  205.580522]  disk_release+0x143/0x490
[  205.580838]  ? disk_release+0x0/0x490
[  205.581146]  ? device_release+0x0/0x250
[  205.581465]  device_release+0xa2/0x250
[  205.581777]  ? device_release+0x0/0x250
[  205.582094]  kobject_put+0x173/0x280
[  205.582397]  put_device+0x1b/0x40
[  205.582678]  put_disk+0x41/0x60
[  205.582949]  loop_control_ioctl+0x4d1/0x630
[  205.583298]  ? loop_control_ioctl+0x0/0x630
[  205.583643]  ? selinux_file_ioctl+0xb1/0x270
[  205.584007]  ? loop_control_ioctl+0x0/0x630
[  205.584354]  __x64_sys_ioctl+0x19a/0x220
[  205.584686]  do_syscall_64+0x3b/0xa0
[  205.585003]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[  205.585411] RIP: 0033:0x7f1b18755b19
[  205.585705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  205.587080] RSP: 002b:00007f1b15caa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  205.587664] RAX: ffffffffffffffda RBX: 00007f1b18869020 RCX: 00007f1b18755b19
[  205.588212] RDX: 0000000000000004 RSI: 0000000000004c81 RDI: 0000000000000005
[  205.588759] RBP: 00007f1b187aff6d R08: 0000000000000000 R09: 0000000000000000
[  205.589323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  205.589871] R13: 00007ffcb2c564cf R14: 00007f1b15caa300 R15: 0000000000022000
[  205.590425]  </TASK>
[  205.590614] Modules linked in:
[  205.590874] CR2: ffffed100fffc000
[  205.591149] ---[ end trace 0000000000000000 ]---
[  205.591514] RIP: 0010:__memset+0x24/0x50
[  205.591851] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  205.593233] RSP: 0018:ffff888039b47cc0 EFLAGS: 00010212
[  205.593648] RAX: 0000000000000000 RBX: ffff88800bff00c0 RCX: 1ffffe21fe5ffe26
[  205.594195] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  205.594741] RBP: ffff88800bfe88c0 R08: 0000000000000005 R09: ffffed10017fe018
[  205.595289] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800bfe88c0
[  205.595835] R13: ffff88800bff00c0 R14: ffffffff815f27a0 R15: 1ffff11001122a1f
[  205.596384] FS:  00007f1b15caa700(0000) GS:ffff88806d000000(0000) knlGS:0000000000000000
[  205.597006] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  205.597458] CR2: ffffed100fffc000 CR3: 00000000199ce000 CR4: 0000000000350ef0
[  205.620962] random: crng reseeded on system resumption
[  205.908337] audit: type=1400 audit(1667219555.814:10): avc:  denied  { write } for  pid=7406 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
12:32:35 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

12:32:35 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x10000a8, &(0x7f0000000140)={[{@grpjquota}]})

12:32:35 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt(r0, 0xff, 0x0, &(0x7f0000000040)="91e3ba13", 0x4)

12:32:35 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x6887c51, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000580)="fe1fbb14d711163ee255f30502ab52fa22c0f6b59096b165a8f33ed55751b401e94bbcaf8931324f8bc5be664035f1e67c96aea3d5cfeda1ab4de847fa11e9a77a5e567fa2a39d9354ec8d619c1eeee07787ae397945a1119fcb3b248d6603f4d1443986c6ee39f1012fc09db873b35e988769ea733b62ddefc1986fcae3495794e25351f552e3fde821c23e811bebb72164fbe02f656c6b5fe079a0dadb8c2a573a66278650bff1740d41655c2e1ad9274f7139d6fe387916a78f05bb577cf10e21df9a3335a19ad01baa2abf424f670feafd666697e5b602aa7a3678a66d929c307c", 0xe3, 0x627b9f85}, {&(0x7f0000000680)="cf187bcda815b93ce208aa5b5a5047585060988c8147fb269f5fbe585a796db27ffba47431d33e6d8283b97a165da9fa3166eafe43c3dab83f4a06cbb42338673ad1d25bfc82cfd2026d5290e9f0", 0x4e, 0x8}, {&(0x7f0000000700)="4999165f7c136ef01d941a2249d7547030feda817d7558a5532142b7e9ce0dc46a1d0de81c4f0088b0155fd77f19831010d285687d1b4cae37ce2d3a58fd7d6267bbcf4b9bb2d05179770f857f5b96774eab74b0e6423186e778bb077d601486740c7548a01b149e83be99316c1ad287813854acdea60f8a5ef68b9d519ef4a857f14507ea6533e10bf88ef798f159f6febb172726913233ac4384b34bb9581e0c5c64265cfcc2b9580fa4d415a7541bdc398e5b3a1e71ee9959", 0xba, 0x9}, {0x0, 0x0, 0x922}, {&(0x7f0000000380)="df1c925423f7abfe", 0x8, 0x7}, {&(0x7f00000008c0)="44aaeb519e1410475470b4c82e3cd4b0b4394d72c9d0863d756294339bce2c4f0e7ca12df87fcf485fd64ac873c14b8287fd41abc05cf30c7d3d027786d945304664eafd722f0c8f5296a9273b11eb6231a2cc03b8805de166307f6f120c75ffc8a5afd4e2d1ca580129d218ad849cf82193cd23324339399de7", 0x7a, 0x3ff}, {&(0x7f0000000940)="03382a6ae732191f19943ea3949a67a6b5c599d2dee9c607a22fdb27d8ec899d0c40197a5cc4b10f473c9a331dc758026b447227842cca14db4708c976c2f4ba4e95258465d8b8ac66acaa8f544de315f573c67d5d7823b465bd506a8cc9796a", 0x60, 0x6}, {&(0x7f00000009c0)="4e8cc242a786c0", 0x7, 0xfffffffffffffffc}], 0x1000010, &(0x7f0000000b00)=ANY=[@ANYBLOB='dots,dots,sys_immutable,dots,discard,nodots=00000000000000000000002'])
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c)

[  206.069372] loop6: detected capacity change from 0 to 214078
12:32:35 executing program 7:
r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x20)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00')
renameat(0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file1\x00')
perf_event_open(&(0x7f0000000140)={0x6, 0x80, 0xff, 0x7f, 0x8, 0x8, 0x0, 0x5, 0x4410, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffff80, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x1200, 0x81, 0x20, 0x1, 0x9, 0xf5, 0x7, 0x0, 0x8}, 0x0, 0x6, 0xffffffffffffffff, 0x2)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x8, 0x5, 0x4, 0x0, 0x9, 0x40, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0xfffffffffffff001, 0xdd}, 0x10900, 0x100, 0x71, 0x5, 0xb0, 0x40, 0x101, 0x0, 0x7f, 0x0, 0x10001}, 0xffffffffffffffff, 0xc, r0, 0x0)
r2 = inotify_init1(0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
write$vga_arbiter(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="746172676574205043493a353a343a11"], 0x13)
r4 = socket$netlink(0x10, 0x3, 0x0)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000300))
dup2(r2, r1)

12:32:35 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
[  206.070828] FAT-fs (loop6): Unrecognized mount option "nodots=00000000000000000000002" or missing value
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x6887c51, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000580)="fe1fbb14d711163ee255f30502ab52fa22c0f6b59096b165a8f33ed55751b401e94bbcaf8931324f8bc5be664035f1e67c96aea3d5cfeda1ab4de847fa11e9a77a5e567fa2a39d9354ec8d619c1eeee07787ae397945a1119fcb3b248d6603f4d1443986c6ee39f1012fc09db873b35e988769ea733b62ddefc1986fcae3495794e25351f552e3fde821c23e811bebb72164fbe02f656c6b5fe079a0dadb8c2a573a66278650bff1740d41655c2e1ad9274f7139d6fe387916a78f05bb577cf10e21df9a3335a19ad01baa2abf424f670feafd666697e5b602aa7a3678a66d929c307c", 0xe3, 0x627b9f85}, {&(0x7f0000000680)="cf187bcda815b93ce208aa5b5a5047585060988c8147fb269f5fbe585a796db27ffba47431d33e6d8283b97a165da9fa3166eafe43c3dab83f4a06cbb42338673ad1d25bfc82cfd2026d5290e9f0", 0x4e, 0x8}, {&(0x7f0000000700)="4999165f7c136ef01d941a2249d7547030feda817d7558a5532142b7e9ce0dc46a1d0de81c4f0088b0155fd77f19831010d285687d1b4cae37ce2d3a58fd7d6267bbcf4b9bb2d05179770f857f5b96774eab74b0e6423186e778bb077d601486740c7548a01b149e83be99316c1ad287813854acdea60f8a5ef68b9d519ef4a857f14507ea6533e10bf88ef798f159f6febb172726913233ac4384b34bb9581e0c5c64265cfcc2b9580fa4d415a7541bdc398e5b3a1e71ee9959", 0xba, 0x9}, {0x0, 0x0, 0x922}, {&(0x7f0000000380)="df1c925423f7abfe", 0x8, 0x7}, {&(0x7f00000008c0)="44aaeb519e1410475470b4c82e3cd4b0b4394d72c9d0863d756294339bce2c4f0e7ca12df87fcf485fd64ac873c14b8287fd41abc05cf30c7d3d027786d945304664eafd722f0c8f5296a9273b11eb6231a2cc03b8805de166307f6f120c75ffc8a5afd4e2d1ca580129d218ad849cf82193cd23324339399de7", 0x7a, 0x3ff}, {&(0x7f0000000940)="03382a6ae732191f19943ea3949a67a6b5c599d2dee9c607a22fdb27d8ec899d0c40197a5cc4b10f473c9a331dc758026b447227842cca14db4708c976c2f4ba4e95258465d8b8ac66acaa8f544de315f573c67d5d7823b465bd506a8cc9796a", 0x60, 0x6}, {&(0x7f00000009c0)="4e8cc242a786c0", 0x7, 0xfffffffffffffffc}], 0x1000010, &(0x7f0000000b00)=ANY=[@ANYBLOB='dots,dots,sys_immutable,dots,discard,nodots=00000000000000000000002'])
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c)

12:32:35 executing program 4:
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x0, 0x0, 0x20, 0x81, 0x0, 0x89})
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500))
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300))
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340))
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f00000004c0))
r2 = syz_open_procfs$userns(0x0, &(0x7f0000000180))
ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0))
dup3(r0, r2, 0x80000)
epoll_create(0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x400000, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pidfd_open(0x0, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000004b80)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108)
sendfile(r3, 0xffffffffffffffff, &(0x7f0000000000)=0x3, 0x1)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

12:32:36 executing program 1:
r0 = epoll_create(0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000))

[  206.142355] EXT4-fs (sda): re-mounted. Quota mode: none.
[  206.146931] EXT4-fs (sda): re-mounted. Quota mode: none.
12:32:36 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x6887c51, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000580)="fe1fbb14d711163ee255f30502ab52fa22c0f6b59096b165a8f33ed55751b401e94bbcaf8931324f8bc5be664035f1e67c96aea3d5cfeda1ab4de847fa11e9a77a5e567fa2a39d9354ec8d619c1eeee07787ae397945a1119fcb3b248d6603f4d1443986c6ee39f1012fc09db873b35e988769ea733b62ddefc1986fcae3495794e25351f552e3fde821c23e811bebb72164fbe02f656c6b5fe079a0dadb8c2a573a66278650bff1740d41655c2e1ad9274f7139d6fe387916a78f05bb577cf10e21df9a3335a19ad01baa2abf424f670feafd666697e5b602aa7a3678a66d929c307c", 0xe3, 0x627b9f85}, {&(0x7f0000000680)="cf187bcda815b93ce208aa5b5a5047585060988c8147fb269f5fbe585a796db27ffba47431d33e6d8283b97a165da9fa3166eafe43c3dab83f4a06cbb42338673ad1d25bfc82cfd2026d5290e9f0", 0x4e, 0x8}, {&(0x7f0000000700)="4999165f7c136ef01d941a2249d7547030feda817d7558a5532142b7e9ce0dc46a1d0de81c4f0088b0155fd77f19831010d285687d1b4cae37ce2d3a58fd7d6267bbcf4b9bb2d05179770f857f5b96774eab74b0e6423186e778bb077d601486740c7548a01b149e83be99316c1ad287813854acdea60f8a5ef68b9d519ef4a857f14507ea6533e10bf88ef798f159f6febb172726913233ac4384b34bb9581e0c5c64265cfcc2b9580fa4d415a7541bdc398e5b3a1e71ee9959", 0xba, 0x9}, {0x0, 0x0, 0x922}, {&(0x7f0000000380)="df1c925423f7abfe", 0x8, 0x7}, {&(0x7f00000008c0)="44aaeb519e1410475470b4c82e3cd4b0b4394d72c9d0863d756294339bce2c4f0e7ca12df87fcf485fd64ac873c14b8287fd41abc05cf30c7d3d027786d945304664eafd722f0c8f5296a9273b11eb6231a2cc03b8805de166307f6f120c75ffc8a5afd4e2d1ca580129d218ad849cf82193cd23324339399de7", 0x7a, 0x3ff}, {&(0x7f0000000940)="03382a6ae732191f19943ea3949a67a6b5c599d2dee9c607a22fdb27d8ec899d0c40197a5cc4b10f473c9a331dc758026b447227842cca14db4708c976c2f4ba4e95258465d8b8ac66acaa8f544de315f573c67d5d7823b465bd506a8cc9796a", 0x60, 0x6}, {&(0x7f00000009c0)="4e8cc242a786c0", 0x7, 0xfffffffffffffffc}], 0x1000010, &(0x7f0000000b00)=ANY=[@ANYBLOB='dots,dots,sys_immutable,dots,discard,nodots=00000000000000000000002'])
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c)

12:32:36 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

12:32:36 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000140)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0)

12:32:36 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xd0}}, {{@in=@multicast1}, 0x0, @in=@private}}, 0xe8)

12:32:36 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)

12:32:36 executing program 7:
r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x20)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00')
renameat(0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file1\x00')
perf_event_open(&(0x7f0000000140)={0x6, 0x80, 0xff, 0x7f, 0x8, 0x8, 0x0, 0x5, 0x4410, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffff80, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x1200, 0x81, 0x20, 0x1, 0x9, 0xf5, 0x7, 0x0, 0x8}, 0x0, 0x6, 0xffffffffffffffff, 0x2)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x8, 0x5, 0x4, 0x0, 0x9, 0x40, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0xfffffffffffff001, 0xdd}, 0x10900, 0x100, 0x71, 0x5, 0xb0, 0x40, 0x101, 0x0, 0x7f, 0x0, 0x10001}, 0xffffffffffffffff, 0xc, r0, 0x0)
r2 = inotify_init1(0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
write$vga_arbiter(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="746172676574205043493a353a343a11"], 0x13)
r4 = socket$netlink(0x10, 0x3, 0x0)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000300))
dup2(r2, r1)

[  206.224496] loop6: detected capacity change from 0 to 214078
[  206.225734] FAT-fs (loop6): Unrecognized mount option "nodots=00000000000000000000002" or missing value
12:32:36 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x6887c51, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000580)="fe1fbb14d711163ee255f30502ab52fa22c0f6b59096b165a8f33ed55751b401e94bbcaf8931324f8bc5be664035f1e67c96aea3d5cfeda1ab4de847fa11e9a77a5e567fa2a39d9354ec8d619c1eeee07787ae397945a1119fcb3b248d6603f4d1443986c6ee39f1012fc09db873b35e988769ea733b62ddefc1986fcae3495794e25351f552e3fde821c23e811bebb72164fbe02f656c6b5fe079a0dadb8c2a573a66278650bff1740d41655c2e1ad9274f7139d6fe387916a78f05bb577cf10e21df9a3335a19ad01baa2abf424f670feafd666697e5b602aa7a3678a66d929c307c", 0xe3, 0x627b9f85}, {&(0x7f0000000680)="cf187bcda815b93ce208aa5b5a5047585060988c8147fb269f5fbe585a796db27ffba47431d33e6d8283b97a165da9fa3166eafe43c3dab83f4a06cbb42338673ad1d25bfc82cfd2026d5290e9f0", 0x4e, 0x8}, {&(0x7f0000000700)="4999165f7c136ef01d941a2249d7547030feda817d7558a5532142b7e9ce0dc46a1d0de81c4f0088b0155fd77f19831010d285687d1b4cae37ce2d3a58fd7d6267bbcf4b9bb2d05179770f857f5b96774eab74b0e6423186e778bb077d601486740c7548a01b149e83be99316c1ad287813854acdea60f8a5ef68b9d519ef4a857f14507ea6533e10bf88ef798f159f6febb172726913233ac4384b34bb9581e0c5c64265cfcc2b9580fa4d415a7541bdc398e5b3a1e71ee9959", 0xba, 0x9}, {0x0, 0x0, 0x922}, {&(0x7f0000000380)="df1c925423f7abfe", 0x8, 0x7}, {&(0x7f00000008c0)="44aaeb519e1410475470b4c82e3cd4b0b4394d72c9d0863d756294339bce2c4f0e7ca12df87fcf485fd64ac873c14b8287fd41abc05cf30c7d3d027786d945304664eafd722f0c8f5296a9273b11eb6231a2cc03b8805de166307f6f120c75ffc8a5afd4e2d1ca580129d218ad849cf82193cd23324339399de7", 0x7a, 0x3ff}, {&(0x7f0000000940)="03382a6ae732191f19943ea3949a67a6b5c599d2dee9c607a22fdb27d8ec899d0c40197a5cc4b10f473c9a331dc758026b447227842cca14db4708c976c2f4ba4e95258465d8b8ac66acaa8f544de315f573c67d5d7823b465bd506a8cc9796a", 0x60, 0x6}, {&(0x7f00000009c0)="4e8cc242a786c0", 0x7, 0xfffffffffffffffc}], 0x1000010, &(0x7f0000000b00)=ANY=[@ANYBLOB='dots,dots,sys_immutable,dots,discard,nodots=00000000000000000000002'])
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c)

12:32:36 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x6887c51, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000580)="fe1fbb14d711163ee255f30502ab52fa22c0f6b59096b165a8f33ed55751b401e94bbcaf8931324f8bc5be664035f1e67c96aea3d5cfeda1ab4de847fa11e9a77a5e567fa2a39d9354ec8d619c1eeee07787ae397945a1119fcb3b248d6603f4d1443986c6ee39f1012fc09db873b35e988769ea733b62ddefc1986fcae3495794e25351f552e3fde821c23e811bebb72164fbe02f656c6b5fe079a0dadb8c2a573a66278650bff1740d41655c2e1ad9274f7139d6fe387916a78f05bb577cf10e21df9a3335a19ad01baa2abf424f670feafd666697e5b602aa7a3678a66d929c307c", 0xe3, 0x627b9f85}, {&(0x7f0000000680)="cf187bcda815b93ce208aa5b5a5047585060988c8147fb269f5fbe585a796db27ffba47431d33e6d8283b97a165da9fa3166eafe43c3dab83f4a06cbb42338673ad1d25bfc82cfd2026d5290e9f0", 0x4e, 0x8}, {&(0x7f0000000700)="4999165f7c136ef01d941a2249d7547030feda817d7558a5532142b7e9ce0dc46a1d0de81c4f0088b0155fd77f19831010d285687d1b4cae37ce2d3a58fd7d6267bbcf4b9bb2d05179770f857f5b96774eab74b0e6423186e778bb077d601486740c7548a01b149e83be99316c1ad287813854acdea60f8a5ef68b9d519ef4a857f14507ea6533e10bf88ef798f159f6febb172726913233ac4384b34bb9581e0c5c64265cfcc2b9580fa4d415a7541bdc398e5b3a1e71ee9959", 0xba, 0x9}, {0x0, 0x0, 0x922}, {&(0x7f0000000380)="df1c925423f7abfe", 0x8, 0x7}, {&(0x7f00000008c0)="44aaeb519e1410475470b4c82e3cd4b0b4394d72c9d0863d756294339bce2c4f0e7ca12df87fcf485fd64ac873c14b8287fd41abc05cf30c7d3d027786d945304664eafd722f0c8f5296a9273b11eb6231a2cc03b8805de166307f6f120c75ffc8a5afd4e2d1ca580129d218ad849cf82193cd23324339399de7", 0x7a, 0x3ff}, {&(0x7f0000000940)="03382a6ae732191f19943ea3949a67a6b5c599d2dee9c607a22fdb27d8ec899d0c40197a5cc4b10f473c9a331dc758026b447227842cca14db4708c976c2f4ba4e95258465d8b8ac66acaa8f544de315f573c67d5d7823b465bd506a8cc9796a", 0x60, 0x6}, {&(0x7f00000009c0)="4e8cc242a786c0", 0x7, 0xfffffffffffffffc}], 0x1000010, &(0x7f0000000b00)=ANY=[@ANYBLOB='dots,dots,sys_immutable,dots,discard,nodots=00000000000000000000002'])
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c)

[  206.305436] loop6: detected capacity change from 0 to 214078
[  206.308849] FAT-fs (loop6): Unrecognized mount option "nodots=00000000000000000000002" or missing value
12:32:36 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5424, &(0x7f00000001c0))

12:32:36 executing program 5:
setpriority(0x1, 0xffffffffffffffff, 0x0)

12:32:36 executing program 2:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYRES16=r1, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRES16=r3, @ANYRES64=r1, @ANYRESDEC=r2, @ANYRES32=r1, @ANYRESOCT=r3])
chdir(&(0x7f0000000140)='./file0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x6)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=0xa8)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r6, 0x0, 0x0, 0x8800000)
openat(r6, &(0x7f0000000080)='./file0\x00', 0x64000, 0x0)

12:32:36 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x0)
syncfs(r0)

12:32:36 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000140)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0)

12:32:36 executing program 4:
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x0, 0x0, 0x20, 0x81, 0x0, 0x89})
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500))
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300))
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340))
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f00000004c0))
r2 = syz_open_procfs$userns(0x0, &(0x7f0000000180))
ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0))
dup3(r0, r2, 0x80000)
epoll_create(0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x400000, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pidfd_open(0x0, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000004b80)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108)
sendfile(r3, 0xffffffffffffffff, &(0x7f0000000000)=0x3, 0x1)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

12:32:36 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x6887c51, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000580)="fe1fbb14d711163ee255f30502ab52fa22c0f6b59096b165a8f33ed55751b401e94bbcaf8931324f8bc5be664035f1e67c96aea3d5cfeda1ab4de847fa11e9a77a5e567fa2a39d9354ec8d619c1eeee07787ae397945a1119fcb3b248d6603f4d1443986c6ee39f1012fc09db873b35e988769ea733b62ddefc1986fcae3495794e25351f552e3fde821c23e811bebb72164fbe02f656c6b5fe079a0dadb8c2a573a66278650bff1740d41655c2e1ad9274f7139d6fe387916a78f05bb577cf10e21df9a3335a19ad01baa2abf424f670feafd666697e5b602aa7a3678a66d929c307c", 0xe3, 0x627b9f85}, {&(0x7f0000000680)="cf187bcda815b93ce208aa5b5a5047585060988c8147fb269f5fbe585a796db27ffba47431d33e6d8283b97a165da9fa3166eafe43c3dab83f4a06cbb42338673ad1d25bfc82cfd2026d5290e9f0", 0x4e, 0x8}, {&(0x7f0000000700)="4999165f7c136ef01d941a2249d7547030feda817d7558a5532142b7e9ce0dc46a1d0de81c4f0088b0155fd77f19831010d285687d1b4cae37ce2d3a58fd7d6267bbcf4b9bb2d05179770f857f5b96774eab74b0e6423186e778bb077d601486740c7548a01b149e83be99316c1ad287813854acdea60f8a5ef68b9d519ef4a857f14507ea6533e10bf88ef798f159f6febb172726913233ac4384b34bb9581e0c5c64265cfcc2b9580fa4d415a7541bdc398e5b3a1e71ee9959", 0xba, 0x9}, {0x0, 0x0, 0x922}, {&(0x7f0000000380)="df1c925423f7abfe", 0x8, 0x7}, {&(0x7f00000008c0)="44aaeb519e1410475470b4c82e3cd4b0b4394d72c9d0863d756294339bce2c4f0e7ca12df87fcf485fd64ac873c14b8287fd41abc05cf30c7d3d027786d945304664eafd722f0c8f5296a9273b11eb6231a2cc03b8805de166307f6f120c75ffc8a5afd4e2d1ca580129d218ad849cf82193cd23324339399de7", 0x7a, 0x3ff}, {&(0x7f0000000940)="03382a6ae732191f19943ea3949a67a6b5c599d2dee9c607a22fdb27d8ec899d0c40197a5cc4b10f473c9a331dc758026b447227842cca14db4708c976c2f4ba4e95258465d8b8ac66acaa8f544de315f573c67d5d7823b465bd506a8cc9796a", 0x60, 0x6}, {&(0x7f00000009c0)="4e8cc242a786c0", 0x7, 0xfffffffffffffffc}], 0x1000010, &(0x7f0000000b00)=ANY=[@ANYBLOB='dots,dots,sys_immutable,dots,discard,nodots=00000000000000000000002'])
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c)

12:32:36 executing program 7:
r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x20)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00')
renameat(0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file1\x00')
perf_event_open(&(0x7f0000000140)={0x6, 0x80, 0xff, 0x7f, 0x8, 0x8, 0x0, 0x5, 0x4410, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffff80, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x1200, 0x81, 0x20, 0x1, 0x9, 0xf5, 0x7, 0x0, 0x8}, 0x0, 0x6, 0xffffffffffffffff, 0x2)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x8, 0x5, 0x4, 0x0, 0x9, 0x40, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0xfffffffffffff001, 0xdd}, 0x10900, 0x100, 0x71, 0x5, 0xb0, 0x40, 0x101, 0x0, 0x7f, 0x0, 0x10001}, 0xffffffffffffffff, 0xc, r0, 0x0)
r2 = inotify_init1(0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0)
write$vga_arbiter(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="746172676574205043493a353a343a11"], 0x13)
r4 = socket$netlink(0x10, 0x3, 0x0)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000300))
dup2(r2, r1)

12:32:36 executing program 5:
syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f00000001c0)='./file1\x00', 0x1, 0xb)
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000003c0))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB="00000000000000002e2f66696c65152f66696c653000"])
fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x8, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)

12:32:36 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000140)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0)

12:32:36 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x10)
copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0)

12:32:36 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
sendfile(r0, r0, 0x0, 0x100000)

12:32:36 executing program 6:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
listen(r0, 0x0)

12:32:36 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000140)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0)

12:32:36 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getgroups(0x0, 0x0)

12:32:36 executing program 5:
syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f00000001c0)='./file1\x00', 0x1, 0xb)
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000003c0))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB="00000000000000002e2f66696c65152f66696c653000"])
fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x8, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)

12:32:36 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0x0, 0x2})
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @private}, 0xc)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, 0xc)

12:32:36 executing program 6:
r0 = syz_open_dev$vcsa(&(0x7f0000000240), 0x1, 0x20001)
pwritev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)="9052131f7ac642d584abe6321bd63a1a727574d393ca489d809c3baf01b3edeb4253e4c6149e3596f67f00cea91dc84c6d1d44c7de1d68d90a1eed9c338ec451f69cb43c8d6d1aaba7", 0x49}, {&(0x7f0000000100)="a099a4022905ba0556ec2c6cb063a4e8bd21039eb93e8f81375b3d95394b79992b8dd9d1d676932096253138288583f79d2452bb275a4819d39be86192c658fde1e829db03f56a0670c36fb2d7d6a0a5a5d9e738391d", 0x56}], 0x2, 0x5, 0x0)

12:32:36 executing program 7:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x20a01, 0x0)
poll(&(0x7f0000005cc0)=[{0xffffffffffffffff, 0x1210}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0xa008}, {0xffffffffffffffff, 0x20}, {r0}], 0x5, 0x101)

12:32:36 executing program 0:
syz_mount_image$vfat(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0xfe2c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0)
rename(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')

12:32:36 executing program 4:
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x0, 0x0, 0x20, 0x81, 0x0, 0x89})
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500))
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300))
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340))
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f00000004c0))
r2 = syz_open_procfs$userns(0x0, &(0x7f0000000180))
ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0))
dup3(r0, r2, 0x80000)
epoll_create(0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x400000, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pidfd_open(0x0, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000004b80)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108)
sendfile(r3, 0xffffffffffffffff, &(0x7f0000000000)=0x3, 0x1)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

12:32:36 executing program 2:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYRES16=r1, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRES16=r3, @ANYRES64=r1, @ANYRESDEC=r2, @ANYRES32=r1, @ANYRESOCT=r3])
chdir(&(0x7f0000000140)='./file0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x6)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=0xa8)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r6, 0x0, 0x0, 0x8800000)
openat(r6, &(0x7f0000000080)='./file0\x00', 0x64000, 0x0)

12:32:36 executing program 1:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYRES16=r1, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRES16=r3, @ANYRES64=r1, @ANYRESDEC=r2, @ANYRES32=r1, @ANYRESOCT=r3])
chdir(&(0x7f0000000140)='./file0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x6)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=0xa8)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r6, 0x0, 0x0, 0x8800000)
openat(r6, &(0x7f0000000080)='./file0\x00', 0x64000, 0x0)

12:32:36 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x4, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)

12:32:36 executing program 5:
syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f00000001c0)='./file1\x00', 0x1, 0xb)
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000003c0))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB="00000000000000002e2f66696c65152f66696c653000"])
fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x8, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)

12:32:36 executing program 5:
syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f00000001c0)='./file1\x00', 0x1, 0xb)
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000003c0))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB="00000000000000002e2f66696c65152f66696c653000"])
fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x8, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0)

12:32:37 executing program 6:
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000007, 0x32, 0xffffffffffffffff, 0x0)

12:32:37 executing program 0:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
pwritev2(r0, &(0x7f0000001380)=[{&(0x7f00000000c0)='9', 0x1}], 0x1, 0x0, 0x0, 0x14)

12:32:37 executing program 3:
r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "be52c58e23fffc8e3137f5652f08ad0fbc860ffdef5764ecc2babdf4532bd3481826cf6eef3eda8fb88f66cf58d882bd67f6b5830b6a36cb74fe0fd62f8aea60"}, 0x48, 0xfffffffffffffffd)
keyctl$clear(0x7, r0)

12:32:37 executing program 6:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
lstat(0x0, 0x0)
getuid()
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
msgctl$IPC_SET(0x0, 0x1, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000001880))
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r1}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
setxattr$security_capability(&(0x7f0000000180)='./file1\x00', &(0x7f0000000300), &(0x7f0000000340)=@v3={0x3000000, [{0x100, 0x400}, {0x9, 0x197}], r1}, 0x18, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0)

12:32:37 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000001b80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
syz_extract_tcp_res(0x0, 0x0, 0x0)

12:32:37 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r0)

12:32:37 executing program 1:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYRES16=r1, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRES16=r3, @ANYRES64=r1, @ANYRESDEC=r2, @ANYRES32=r1, @ANYRESOCT=r3])
chdir(&(0x7f0000000140)='./file0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x6)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=0xa8)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r6, 0x0, 0x0, 0x8800000)
openat(r6, &(0x7f0000000080)='./file0\x00', 0x64000, 0x0)

12:32:37 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/vmstat\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000000)=""/201, 0xc9, 0x80000000000000)

12:32:37 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x16, 0x0, 0x18)

[  207.353551] Bluetooth: hci3: unexpected subevent 0x03 length: 28 > 9
[  207.354313] Bluetooth: hci3: unexpected subevent 0x03 length: 28 > 9
12:32:37 executing program 2:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYRES16=r1, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRES16=r3, @ANYRES64=r1, @ANYRESDEC=r2, @ANYRES32=r1, @ANYRESOCT=r3])
chdir(&(0x7f0000000140)='./file0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x6)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=0xa8)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r6, 0x0, 0x0, 0x8800000)
openat(r6, &(0x7f0000000080)='./file0\x00', 0x64000, 0x0)

12:32:37 executing program 7:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x20a01, 0x0)
poll(&(0x7f0000005cc0)=[{0xffffffffffffffff, 0x1210}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0xa008}, {0xffffffffffffffff, 0x20}, {r0}], 0x5, 0x101)

12:32:37 executing program 0:
r0 = syz_io_uring_setup(0x4efe, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, 0x0}, 0x101)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0xf57, 0x0, 0x0, 0x0, 0x0)

12:32:37 executing program 6:
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e150356"], 0x20)

12:32:37 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r0, 0x0, 0xfffffdef)

12:32:37 executing program 4:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0)

[  207.440642] loop6: detected capacity change from 0 to 40
12:32:37 executing program 5:
stat(&(0x7f0000001280)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r1}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq}, {@measure}]}})
fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000003c0)={{0x2, r2, r1, r0, 0xee00, 0x8e, 0x6}, 0xd590, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffc})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x3, 0x7fff}, {0x5, 0x8000}, {0x4, 0x7d}, {0x7}, {0xc, 0x1}, {0x3, 0x200}, {0x81, 0x9}]})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup(0xffffffffffffffff)
creat(&(0x7f0000000240)='./file1\x00', 0x119)

12:32:37 executing program 0:
mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x1)
mount$cgroup(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f0000000840)={[{@xattr}, {@cpuset_v2_mode}, {@subsystem='cpuset'}]})

12:32:37 executing program 3:
getresuid(&(0x7f0000000dc0), 0x0, 0x0)

[  207.503808] syz-executor.6: attempt to access beyond end of device
[  207.503808] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[  207.504818] Buffer I/O error on dev loop6, logical block 31, lost async page write
12:32:37 executing program 4:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x34010000, 0x0, 0x0)

12:32:37 executing program 1:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYRES16=r1, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRES16=r3, @ANYRES64=r1, @ANYRESDEC=r2, @ANYRES32=r1, @ANYRESOCT=r3])
chdir(&(0x7f0000000140)='./file0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x6)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=0xa8)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r6, 0x0, 0x0, 0x8800000)
openat(r6, &(0x7f0000000080)='./file0\x00', 0x64000, 0x0)

12:32:37 executing program 2:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYRES16=r1, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRES16=r3, @ANYRES64=r1, @ANYRESDEC=r2, @ANYRES32=r1, @ANYRESOCT=r3])
chdir(&(0x7f0000000140)='./file0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x6)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=0xa8)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r6, 0x0, 0x0, 0x8800000)
openat(r6, &(0x7f0000000080)='./file0\x00', 0x64000, 0x0)

12:32:37 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)

12:32:37 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x20, 0xb1, 0x2, 0x0, 0x0, 0x400, 0x80000, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x81, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x100, 0x1, 0x7, 0x2, 0x5, 0x0, 0x6, 0x0, 0x9, 0x0, 0x1}, 0x0, 0x7, 0xffffffffffffffff, 0x3)
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="a5eb6457be3818edb356eaa23d2bbde803b00856", @ANYRES16, @ANYBLOB="856c00000000000000000c000000080001000100000008000300c3ec8491708b65834a596394c80a2759d0be342ca59b25ffbf89491c6f83eb90e444ae452eee58a2dea023ec89959854e057105e0ecbde83ff442b344c64ba670c2257e83154cfedccc97e88", @ANYRES32, @ANYBLOB="42ee238162b6c8bc3a8dcad42617866a76c855722068c1513a1e88e767a7f7b4f0c895b7"], 0x24}}, 0x0)

12:32:37 executing program 7:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x20a01, 0x0)
poll(&(0x7f0000005cc0)=[{0xffffffffffffffff, 0x1210}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0xa008}, {0xffffffffffffffff, 0x20}, {r0}], 0x5, 0x101)

12:32:37 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x20, 0xb1, 0x2, 0x0, 0x0, 0x400, 0x80000, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x81, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x100, 0x1, 0x7, 0x2, 0x5, 0x0, 0x6, 0x0, 0x9, 0x0, 0x1}, 0x0, 0x7, 0xffffffffffffffff, 0x3)
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="a5eb6457be3818edb356eaa23d2bbde803b00856", @ANYRES16, @ANYBLOB="856c00000000000000000c000000080001000100000008000300c3ec8491708b65834a596394c80a2759d0be342ca59b25ffbf89491c6f83eb90e444ae452eee58a2dea023ec89959854e057105e0ecbde83ff442b344c64ba670c2257e83154cfedccc97e88", @ANYRES32, @ANYBLOB="42ee238162b6c8bc3a8dcad42617866a76c855722068c1513a1e88e767a7f7b4f0c895b7"], 0x24}}, 0x0)

[  207.766740] audit: type=1400 audit(1667219557.670:11): avc:  denied  { block_suspend } for  pid=7545 comm="syz-executor.5" capability=36  scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1
[  208.608197] loop6: detected capacity change from 0 to 40
12:32:38 executing program 2:
stat(&(0x7f0000001280)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r1}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq}, {@measure}]}})
fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000003c0)={{0x2, r2, r1, r0, 0xee00, 0x8e, 0x6}, 0xd590, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffc})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x3, 0x7fff}, {0x5, 0x8000}, {0x4, 0x7d}, {0x7}, {0xc, 0x1}, {0x3, 0x200}, {0x81, 0x9}]})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup(0xffffffffffffffff)
creat(&(0x7f0000000240)='./file1\x00', 0x119)

12:32:38 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r0, 0x0, 0xfffffdef)

12:32:38 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCSPGRP(r0, 0x894c, 0x0)

12:32:38 executing program 4:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x34010000, 0x0, 0x0)

12:32:38 executing program 5:
stat(&(0x7f0000001280)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r1}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq}, {@measure}]}})
fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000003c0)={{0x2, r2, r1, r0, 0xee00, 0x8e, 0x6}, 0xd590, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffc})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x3, 0x7fff}, {0x5, 0x8000}, {0x4, 0x7d}, {0x7}, {0xc, 0x1}, {0x3, 0x200}, {0x81, 0x9}]})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup(0xffffffffffffffff)
creat(&(0x7f0000000240)='./file1\x00', 0x119)

12:32:38 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
io_submit(0x0, 0x30, &(0x7f0000001340))
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x3, 0x7fff}, {0x5, 0x8000}, {0x4, 0x7d}, {0x7}, {0xc, 0x1}, {0x3, 0x200}, {0x81, 0x9}]})
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000180))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="cb59080af0522b7a097ad2d9fa8c0fa2d6e144bcee5c6c3602af9b34e557025a12b76979fd75c1670677d807ae4bc46df2437d1e489bcd0d42376be2a82cc11b19c2fe9ad547d82806a8a2759cf7a9e4356014c8795e0de13fbf8b0f92c7f6ef4942c13ce63e0839fb02bbdf91731c5269a21b7d2208fe28b8f12938081f983f4eeae13caabb00ef288b2868c7fd89dd6d879f095c2b711d65569f0bab369c64f9963083a8334d25640fa38b65a3e7d21434be46f03d683afdcde3f6add3ffe7337d6865b420cf4ecc0920effd2efb4991c0a61d5ef78a3d1b3909393f4d52f519e31040d1a2b6bbe3057f62d6137c6c0294eb1ba47697ddb0cf0cf123ae93834de351c483b1f01e4afb68c45dc5e44235b6354cbe2b45a85a1d134b2a499dff3fe5df675c7c35828b7f10afc6c8faaf0266a0cbbec9c80076cf8fadea", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080))
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r5 = dup(0xffffffffffffffff)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r6 = fcntl$getown(r5, 0x9)
ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f00000001c0)=r6)
creat(&(0x7f0000000240)='./file1\x00', 0x119)

12:32:38 executing program 7:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x20a01, 0x0)
poll(&(0x7f0000005cc0)=[{0xffffffffffffffff, 0x1210}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0xa008}, {0xffffffffffffffff, 0x20}, {r0}], 0x5, 0x101)

12:32:38 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x20, 0xb1, 0x2, 0x0, 0x0, 0x400, 0x80000, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x81, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x100, 0x1, 0x7, 0x2, 0x5, 0x0, 0x6, 0x0, 0x9, 0x0, 0x1}, 0x0, 0x7, 0xffffffffffffffff, 0x3)
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="a5eb6457be3818edb356eaa23d2bbde803b00856", @ANYRES16, @ANYBLOB="856c00000000000000000c000000080001000100000008000300c3ec8491708b65834a596394c80a2759d0be342ca59b25ffbf89491c6f83eb90e444ae452eee58a2dea023ec89959854e057105e0ecbde83ff442b344c64ba670c2257e83154cfedccc97e88", @ANYRES32, @ANYBLOB="42ee238162b6c8bc3a8dcad42617866a76c855722068c1513a1e88e767a7f7b4f0c895b7"], 0x24}}, 0x0)

12:32:38 executing program 4:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x34010000, 0x0, 0x0)

12:32:38 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x20, 0xb1, 0x2, 0x0, 0x0, 0x400, 0x80000, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x81, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x100, 0x1, 0x7, 0x2, 0x5, 0x0, 0x6, 0x0, 0x9, 0x0, 0x1}, 0x0, 0x7, 0xffffffffffffffff, 0x3)
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="a5eb6457be3818edb356eaa23d2bbde803b00856", @ANYRES16, @ANYBLOB="856c00000000000000000c000000080001000100000008000300c3ec8491708b65834a596394c80a2759d0be342ca59b25ffbf89491c6f83eb90e444ae452eee58a2dea023ec89959854e057105e0ecbde83ff442b344c64ba670c2257e83154cfedccc97e88", @ANYRES32, @ANYBLOB="42ee238162b6c8bc3a8dcad42617866a76c855722068c1513a1e88e767a7f7b4f0c895b7"], 0x24}}, 0x0)

12:32:38 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCSPGRP(r0, 0x894c, 0x0)

[  208.848486] syz-executor.6: attempt to access beyond end of device
[  208.848486] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[  208.850945] Buffer I/O error on dev loop6, logical block 31, lost async page write
12:32:38 executing program 4:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x34010000, 0x0, 0x0)

12:32:38 executing program 7:
stat(&(0x7f0000001280)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r1}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq}, {@measure}]}})
fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000003c0)={{0x2, r2, r1, r0, 0xee00, 0x8e, 0x6}, 0xd590, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffc})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x3, 0x7fff}, {0x5, 0x8000}, {0x4, 0x7d}, {0x7}, {0xc, 0x1}, {0x3, 0x200}, {0x81, 0x9}]})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup(0xffffffffffffffff)
creat(&(0x7f0000000240)='./file1\x00', 0x119)

12:32:38 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
io_submit(0x0, 0x30, &(0x7f0000001340))
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x3, 0x7fff}, {0x5, 0x8000}, {0x4, 0x7d}, {0x7}, {0xc, 0x1}, {0x3, 0x200}, {0x81, 0x9}]})
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000180))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080))
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r5 = dup(0xffffffffffffffff)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r6 = fcntl$getown(r5, 0x9)
ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f00000001c0)=r6)
creat(&(0x7f0000000240)='./file1\x00', 0x119)

12:32:38 executing program 4:
stat(&(0x7f0000001280)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r1}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq}, {@measure}]}})
fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000003c0)={{0x2, r2, r1, r0, 0xee00, 0x8e, 0x6}, 0xd590, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffc})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x3, 0x7fff}, {0x5, 0x8000}, {0x4, 0x7d}, {0x7}, {0xc, 0x1}, {0x3, 0x200}, {0x81, 0x9}]})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup(0xffffffffffffffff)
creat(&(0x7f0000000240)='./file1\x00', 0x119)

12:32:38 executing program 5:
stat(&(0x7f0000001280)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r1}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq}, {@measure}]}})
fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000003c0)={{0x2, r2, r1, r0, 0xee00, 0x8e, 0x6}, 0xd590, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffc})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x3, 0x7fff}, {0x5, 0x8000}, {0x4, 0x7d}, {0x7}, {0xc, 0x1}, {0x3, 0x200}, {0x81, 0x9}]})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup(0xffffffffffffffff)
creat(&(0x7f0000000240)='./file1\x00', 0x119)

12:32:38 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCSPGRP(r0, 0x894c, 0x0)

[  209.074655] loop6: detected capacity change from 0 to 40
12:32:38 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r0, 0x0, 0xfffffdef)

12:32:38 executing program 2:
stat(&(0x7f0000001280)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r1}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq}, {@measure}]}})
fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000003c0)={{0x2, r2, r1, r0, 0xee00, 0x8e, 0x6}, 0xd590, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffc})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x3, 0x7fff}, {0x5, 0x8000}, {0x4, 0x7d}, {0x7}, {0xc, 0x1}, {0x3, 0x200}, {0x81, 0x9}]})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup(0xffffffffffffffff)
creat(&(0x7f0000000240)='./file1\x00', 0x119)

12:32:39 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCSPGRP(r0, 0x894c, 0x0)

12:32:39 executing program 5:
stat(&(0x7f0000001280)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r1}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq}, {@measure}]}})
fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000003c0)={{0x2, r2, r1, r0, 0xee00, 0x8e, 0x6}, 0xd590, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffc})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x3, 0x7fff}, {0x5, 0x8000}, {0x4, 0x7d}, {0x7}, {0xc, 0x1}, {0x3, 0x200}, {0x81, 0x9}]})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup(0xffffffffffffffff)
creat(&(0x7f0000000240)='./file1\x00', 0x119)

12:32:39 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000140)="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")

12:32:39 executing program 4:
stat(&(0x7f0000001280)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r1}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq}, {@measure}]}})
fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000003c0)={{0x2, r2, r1, r0, 0xee00, 0x8e, 0x6}, 0xd590, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffc})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x3, 0x7fff}, {0x5, 0x8000}, {0x4, 0x7d}, {0x7}, {0xc, 0x1}, {0x3, 0x200}, {0x81, 0x9}]})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup(0xffffffffffffffff)
creat(&(0x7f0000000240)='./file1\x00', 0x119)

12:32:39 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0x541b, 0x0)

12:32:39 executing program 7:
stat(&(0x7f0000001280)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r1}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq}, {@measure}]}})
fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000003c0)={{0x2, r2, r1, r0, 0xee00, 0x8e, 0x6}, 0xd590, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffc})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x3, 0x7fff}, {0x5, 0x8000}, {0x4, 0x7d}, {0x7}, {0xc, 0x1}, {0x3, 0x200}, {0x81, 0x9}]})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup(0xffffffffffffffff)
creat(&(0x7f0000000240)='./file1\x00', 0x119)

12:32:39 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_DISALLOCATE(r0, 0x4b4a)

12:32:39 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]})
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, 0x0)

[  209.709315] audit: type=1326 audit(1667219559.613:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7640 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f21910b19 code=0x0
12:32:39 executing program 2:
stat(&(0x7f0000001280)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r1}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq}, {@measure}]}})
fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000003c0)={{0x2, r2, r1, r0, 0xee00, 0x8e, 0x6}, 0xd590, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffc})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x3, 0x7fff}, {0x5, 0x8000}, {0x4, 0x7d}, {0x7}, {0xc, 0x1}, {0x3, 0x200}, {0x81, 0x9}]})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup(0xffffffffffffffff)
creat(&(0x7f0000000240)='./file1\x00', 0x119)

[  210.281873] syz-executor.6: attempt to access beyond end of device
[  210.281873] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[  210.283217] Buffer I/O error on dev loop6, logical block 31, lost async page write
[  210.541804] audit: type=1326 audit(1667219560.446:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7640 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f21910b19 code=0x0
12:32:40 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8927, &(0x7f00000000c0)={'sit0\x00', 0x0})

12:32:40 executing program 5:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNAPSHOT_S2RAM(r0, 0x330b)

12:32:40 executing program 4:
stat(&(0x7f0000001280)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r1}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq}, {@measure}]}})
fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000003c0)={{0x2, r2, r1, r0, 0xee00, 0x8e, 0x6}, 0xd590, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffc})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x3, 0x7fff}, {0x5, 0x8000}, {0x4, 0x7d}, {0x7}, {0xc, 0x1}, {0x3, 0x200}, {0x81, 0x9}]})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup(0xffffffffffffffff)
creat(&(0x7f0000000240)='./file1\x00', 0x119)

12:32:40 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
io_submit(0x0, 0x30, &(0x7f0000001340))
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x3, 0x7fff}, {0x5, 0x8000}, {0x4, 0x7d}, {0x7}, {0xc, 0x1}, {0x3, 0x200}, {0x81, 0x9}]})
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000180))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080))
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r5 = dup(0xffffffffffffffff)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r6 = fcntl$getown(r5, 0x9)
ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f00000001c0)=r6)
creat(&(0x7f0000000240)='./file1\x00', 0x119)

12:32:40 executing program 7:
stat(&(0x7f0000001280)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r1}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq}, {@measure}]}})
fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000003c0)={{0x2, r2, r1, r0, 0xee00, 0x8e, 0x6}, 0xd590, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffc})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x3, 0x7fff}, {0x5, 0x8000}, {0x4, 0x7d}, {0x7}, {0xc, 0x1}, {0x3, 0x200}, {0x81, 0x9}]})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup(0xffffffffffffffff)
creat(&(0x7f0000000240)='./file1\x00', 0x119)

12:32:40 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open
VM DIAGNOSIS:
12:32:31  Registers:
info registers vcpu 0
RAX=0000000000000007 RBX=00007fd3225ee658 RCX=0000000000000072 RDX=0000000000000000
RSI=0000000000000000 RDI=000055b6714a1440 RBP=00000000000007a6 RSP=00007fffea584fb0
R8 =0000000000000000 R9 =0000000000000000 R10=000055b6719b065e R11=000055b6719b0650
R12=00007fd3225ee618 R13=0000000000000000 R14=000000000000a000 R15=000055b6719b0650
RIP=00007fd3234a9c11 RFL=00000213 [----A-C] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fd322ef18c0 00000000 00000000
GS =0000 0000000000000000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe102fa34000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe102fa32000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fffea57dc38 CR3=000000003f276000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000055b6719b0650000055b6719b0650 XMM01=00000000ffffffff0000000000000000
XMM02=ffffff00000000000000000000000000 XMM03=ffffffffff00007fffea0031706f6f6c
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=ffffffffffff00000000000000000000
XMM06=00000000000065616124242f6867632f XMM07=00000000000000000000000000000000
XMM08=000000313a372f6b636f6c622f766564 XMM09=00000000000000000000000000000000
XMM10=00000000002000000000000000200000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=ffffffff82451091 RDI=ffffffff879a19e0 RBP=ffffffff879a19a0 RSP=ffff888039b47510
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001
R12=0000000000000000 R13=ffffffff879a19a0 R14=ffffffff879a19f0 R15=ffffffff879a1c50
RIP=ffffffff824510e9 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f1f1ee86700 00000000 00000000
GS =0000 ffff88806d100000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe2f98d23000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe2f98d21000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=ffffed100fffc000 CR3=0000000038fd0000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000