r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x20001) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw\x00') r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) r4 = pidfd_getfd(r1, r0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x800448d3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x9b}}, './file0\x00'}) close(r7) close(r6) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)={0x1c, 0x5e, 0xffffffffffffffff, 0x0, 0x0, "", [@generic="bf3d1e1489d17b8037"]}, 0x1c}], 0x1}, 0x0) sendfile(r8, r1, &(0x7f0000000200)=0x4, 0x2) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x5}, 0x48000) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)