Warning: Permanently added '10.128.0.154' (ECDSA) to the list of known hosts.
2021/08/21 04:37:14 fuzzer started
2021/08/21 04:37:14 dialing manager at 10.128.0.163:32889
2021/08/21 04:37:14 syscalls: 1973
2021/08/21 04:37:14 code coverage: enabled
2021/08/21 04:37:14 comparison tracing: enabled
2021/08/21 04:37:14 extra coverage: enabled
2021/08/21 04:37:14 setuid sandbox: enabled
2021/08/21 04:37:14 namespace sandbox: enabled
2021/08/21 04:37:14 Android sandbox: enabled
2021/08/21 04:37:14 fault injection: enabled
2021/08/21 04:37:14 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2021/08/21 04:37:14 net packet injection: /dev/net/tun does not exist
2021/08/21 04:37:14 net device setup: enabled
2021/08/21 04:37:14 concurrency sanitizer: enabled
2021/08/21 04:37:14 devlink PCI setup: PCI device 0000:00:10.0 is not available
2021/08/21 04:37:14 USB emulation: /dev/raw-gadget does not exist
2021/08/21 04:37:14 hci packet injection: /dev/vhci does not exist
2021/08/21 04:37:14 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist
2021/08/21 04:37:14 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist
2021/08/21 04:37:14 suppressing KCSAN reports in functions: '__xa_clear_mark' 'n_tty_receive_buf_common' 'do_sys_poll' 
2021/08/21 04:37:14 fetching corpus: 0, signal 0/2000 (executing program)
2021/08/21 04:37:14 fetching corpus: 50, signal 16102/19410 (executing program)
2021/08/21 04:37:14 fetching corpus: 100, signal 32843/36714 (executing program)
2021/08/21 04:37:14 fetching corpus: 150, signal 39678/44239 (executing program)
2021/08/21 04:37:14 fetching corpus: 200, signal 43988/49211 (executing program)
2021/08/21 04:37:14 fetching corpus: 250, signal 46684/52605 (executing program)
2021/08/21 04:37:15 fetching corpus: 300, signal 50413/56710 (executing program)
2021/08/21 04:37:15 fetching corpus: 350, signal 53566/60189 (executing program)
2021/08/21 04:37:15 fetching corpus: 400, signal 58930/65280 (executing program)
2021/08/21 04:37:15 fetching corpus: 450, signal 60626/67326 (executing program)
2021/08/21 04:37:15 fetching corpus: 500, signal 63542/70183 (executing program)
2021/08/21 04:37:15 fetching corpus: 550, signal 66749/73141 (executing program)
2021/08/21 04:37:15 fetching corpus: 600, signal 69829/75860 (executing program)
2021/08/21 04:37:15 fetching corpus: 650, signal 72463/78152 (executing program)
2021/08/21 04:37:15 fetching corpus: 700, signal 74082/79619 (executing program)
2021/08/21 04:37:15 fetching corpus: 750, signal 75896/81144 (executing program)
2021/08/21 04:37:15 fetching corpus: 800, signal 77307/82352 (executing program)
2021/08/21 04:37:15 fetching corpus: 850, signal 80049/84304 (executing program)
2021/08/21 04:37:15 fetching corpus: 900, signal 82549/85991 (executing program)
2021/08/21 04:37:15 fetching corpus: 950, signal 84286/87104 (executing program)
2021/08/21 04:37:15 fetching corpus: 1000, signal 85194/87724 (executing program)
2021/08/21 04:37:15 fetching corpus: 1050, signal 87454/88966 (executing program)
2021/08/21 04:37:16 fetching corpus: 1100, signal 88582/89561 (executing program)
2021/08/21 04:37:16 fetching corpus: 1131, signal 89946/90274 (executing program)
2021/08/21 04:37:16 fetching corpus: 1131, signal 89946/90289 (executing program)
2021/08/21 04:37:16 fetching corpus: 1131, signal 89946/90303 (executing program)
2021/08/21 04:37:16 fetching corpus: 1131, signal 89946/90313 (executing program)
2021/08/21 04:37:16 fetching corpus: 1131, signal 89946/90321 (executing program)
2021/08/21 04:37:16 fetching corpus: 1131, signal 89946/90331 (executing program)
2021/08/21 04:37:16 fetching corpus: 1131, signal 89946/90348 (executing program)
2021/08/21 04:37:16 fetching corpus: 1131, signal 89946/90366 (executing program)
2021/08/21 04:37:16 fetching corpus: 1131, signal 89946/90377 (executing program)
2021/08/21 04:37:16 fetching corpus: 1131, signal 89946/90390 (executing program)
2021/08/21 04:37:16 fetching corpus: 1131, signal 89946/90402 (executing program)
2021/08/21 04:37:16 fetching corpus: 1131, signal 89946/90420 (executing program)
2021/08/21 04:37:16 fetching corpus: 1131, signal 89946/90435 (executing program)
2021/08/21 04:37:16 fetching corpus: 1131, signal 89946/90449 (executing program)
2021/08/21 04:37:16 fetching corpus: 1131, signal 89946/90463 (executing program)
2021/08/21 04:37:16 fetching corpus: 1131, signal 89946/90475 (executing program)
2021/08/21 04:37:16 fetching corpus: 1131, signal 89946/90490 (executing program)
2021/08/21 04:37:16 fetching corpus: 1131, signal 89946/90504 (executing program)
2021/08/21 04:37:16 fetching corpus: 1131, signal 89946/90520 (executing program)
2021/08/21 04:37:16 fetching corpus: 1131, signal 89946/90540 (executing program)
2021/08/21 04:37:16 fetching corpus: 1131, signal 89946/90554 (executing program)
2021/08/21 04:37:16 fetching corpus: 1131, signal 89946/90570 (executing program)
2021/08/21 04:37:16 fetching corpus: 1131, signal 89946/90570 (executing program)
2021/08/21 04:37:16 fetching corpus: 1131, signal 89946/90570 (executing program)
2021/08/21 04:37:17 starting 6 fuzzer processes
04:37:17 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
fcntl$lock(r0, 0x24, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x3})

04:37:17 executing program 1:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
get_mempolicy(0x0, &(0x7f0000000040), 0xff, &(0x7f00000cf000/0x4000)=nil, 0x4)

04:37:17 executing program 5:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="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", 0xfa}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x3a)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffc}}, 0x0)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

04:37:17 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00')
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

04:37:17 executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x43400)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x400000000)
lseek(r0, 0x0, 0x3)

04:37:17 executing program 4:
r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r4, 0x0)
shmctl$IPC_RMID(r0, 0x0)

syzkaller login: [   22.256051][   T25] audit: type=1400 audit(1629520637.645:8): avc:  denied  { execmem } for  pid=1767 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[   22.366251][ T1773] cgroup: Unknown subsys name 'perf_event'
[   22.372640][ T1773] cgroup: Unknown subsys name 'net_cls'
[   22.375861][ T1774] cgroup: Unknown subsys name 'perf_event'
[   22.384314][ T1774] cgroup: Unknown subsys name 'net_cls'
[   22.396353][ T1775] cgroup: Unknown subsys name 'perf_event'
[   22.402321][ T1775] cgroup: Unknown subsys name 'net_cls'
[   22.403035][ T1776] cgroup: Unknown subsys name 'perf_event'
[   22.413396][ T1779] cgroup: Unknown subsys name 'perf_event'
[   22.415184][ T1777] cgroup: Unknown subsys name 'perf_event'
[   22.422016][ T1779] cgroup: Unknown subsys name 'net_cls'
[   22.425499][ T1776] cgroup: Unknown subsys name 'net_cls'
[   22.433239][ T1777] cgroup: Unknown subsys name 'net_cls'
04:37:21 executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x43400)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x400000000)
lseek(r0, 0x0, 0x3)

04:37:21 executing program 5:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="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", 0xfa}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x3a)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffc}}, 0x0)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

04:37:21 executing program 5:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="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", 0xfa}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x3a)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffc}}, 0x0)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

04:37:21 executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x43400)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x400000000)
lseek(r0, 0x0, 0x3)

04:37:21 executing program 5:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="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", 0xfa}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x3a)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffc}}, 0x0)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

04:37:21 executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x43400)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x400000000)
lseek(r0, 0x0, 0x3)

04:37:22 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
fcntl$lock(r0, 0x24, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x3})

04:37:22 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x43400)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x400000000)
lseek(r0, 0x0, 0x3)

04:37:22 executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x43400)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x400000000)
lseek(r0, 0x0, 0x3)

04:37:22 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00')
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

04:37:22 executing program 4:
r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r4, 0x0)
shmctl$IPC_RMID(r0, 0x0)

04:37:22 executing program 1:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
get_mempolicy(0x0, &(0x7f0000000040), 0xff, &(0x7f00000cf000/0x4000)=nil, 0x4)

04:37:22 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
fcntl$lock(r0, 0x24, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x3})

04:37:22 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00')
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

04:37:22 executing program 4:
r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r4, 0x0)
shmctl$IPC_RMID(r0, 0x0)

04:37:22 executing program 1:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
get_mempolicy(0x0, &(0x7f0000000040), 0xff, &(0x7f00000cf000/0x4000)=nil, 0x4)

04:37:22 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x43400)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x400000000)
lseek(r0, 0x0, 0x3)

04:37:22 executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x43400)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x400000000)
lseek(r0, 0x0, 0x3)

04:37:22 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
fcntl$lock(r0, 0x24, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x3})

04:37:22 executing program 4:
r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r4, 0x0)
shmctl$IPC_RMID(r0, 0x0)

04:37:22 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00')
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

04:37:22 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x43400)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x400000000)
lseek(r0, 0x0, 0x3)

04:37:22 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x43400)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x400000000)
lseek(r0, 0x0, 0x3)

04:37:22 executing program 1:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
get_mempolicy(0x0, &(0x7f0000000040), 0xff, &(0x7f00000cf000/0x4000)=nil, 0x4)

04:37:22 executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x43400)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x400000000)
lseek(r0, 0x0, 0x3)

04:37:22 executing program 2:
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080))
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0)

04:37:22 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000080)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x36, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40)

04:37:22 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x2e}, {0x0}, {&(0x7f0000000100)="66730700ae97eaa769beba55cddf1adc76ae04c2f76899d2dd6482530a80134087deb53aefc59f323b2b163ccd0439c5472d2d23e420b85268bcf1adb6c5a3be6e6386b61b108083810175b174c0bb89a0cda6f0a0b2ed3b07e6df3bf980e202e5a4f3cbff12667629df4fdaa5ea575dc0ac71f33f9006ba944510c5cd454cb763df12716c2daf66bd60c192f5286ac79f16658f30e52f8eb932f4c0bf2eaf4a8ebb06abfad4d94db69ab570b875fa90964365f48891c568f872f7cb29fa6cbe289c2a6cc2e500f26d19293cbb625d0f7792312af9fde2ca25e4d50543bc6641938d70eae5", 0xe5}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

04:37:22 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x43400)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x400000000)
lseek(r0, 0x0, 0x3)

04:37:22 executing program 5:
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xbb, 0x7, 0x7, 0x0, 0xfffffffffffff221, 0x10000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x149, 0x80000000}, 0x0, 0x8, 0x8, 0x5, 0x3, 0x1, 0xea3, 0x0, 0x7f, 0x0, 0xffffffffffffffff}, r1, 0x6, r0, 0x0)
perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x99, 0x1, 0x9, 0x6, 0x0, 0x9, 0x20084, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r2, 0x6)
set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0x9)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x40000000000002)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0xb92e6000)
fcntl$setstatus(r3, 0x4, 0x4002)
io_setup(0x79d0, &(0x7f0000000000)=<r5=>0x0)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000340)="d4", 0x1}], 0x1, 0x40000c9, 0x0)
io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x19, 0x0, 0x8, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}])
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)

04:37:22 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000080)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x36, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40)

[   26.968824][ T4605] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure
04:37:22 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x4)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x49, &(0x7f0000002880)={@rand_addr=' \x01\x00'}, 0x14)

04:37:22 executing program 2:
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080))
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0)

04:37:22 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000080)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x36, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40)

04:37:22 executing program 2:
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080))
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0)

04:37:22 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x4)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x49, &(0x7f0000002880)={@rand_addr=' \x01\x00'}, 0x14)

04:37:22 executing program 5:
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xbb, 0x7, 0x7, 0x0, 0xfffffffffffff221, 0x10000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x149, 0x80000000}, 0x0, 0x8, 0x8, 0x5, 0x3, 0x1, 0xea3, 0x0, 0x7f, 0x0, 0xffffffffffffffff}, r1, 0x6, r0, 0x0)
perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x99, 0x1, 0x9, 0x6, 0x0, 0x9, 0x20084, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r2, 0x6)
set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0x9)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x40000000000002)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0xb92e6000)
fcntl$setstatus(r3, 0x4, 0x4002)
io_setup(0x79d0, &(0x7f0000000000)=<r5=>0x0)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000340)="d4", 0x1}], 0x1, 0x40000c9, 0x0)
io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x19, 0x0, 0x8, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}])
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)

04:37:22 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x43400)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x400000000)
lseek(r0, 0x0, 0x3)

04:37:22 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000080)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x36, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40)

04:37:25 executing program 2:
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080))
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0)

04:37:25 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x4)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x49, &(0x7f0000002880)={@rand_addr=' \x01\x00'}, 0x14)

04:37:25 executing program 1:
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xbb, 0x7, 0x7, 0x0, 0xfffffffffffff221, 0x10000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x149, 0x80000000}, 0x0, 0x8, 0x8, 0x5, 0x3, 0x1, 0xea3, 0x0, 0x7f, 0x0, 0xffffffffffffffff}, r1, 0x6, r0, 0x0)
perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x99, 0x1, 0x9, 0x6, 0x0, 0x9, 0x20084, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r2, 0x6)
set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0x9)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x40000000000002)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0xb92e6000)
fcntl$setstatus(r3, 0x4, 0x4002)
io_setup(0x79d0, &(0x7f0000000000)=<r5=>0x0)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000340)="d4", 0x1}], 0x1, 0x40000c9, 0x0)
io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x19, 0x0, 0x8, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}])
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)

04:37:25 executing program 4:
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xbb, 0x7, 0x7, 0x0, 0xfffffffffffff221, 0x10000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x149, 0x80000000}, 0x0, 0x8, 0x8, 0x5, 0x3, 0x1, 0xea3, 0x0, 0x7f, 0x0, 0xffffffffffffffff}, r1, 0x6, r0, 0x0)
perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x99, 0x1, 0x9, 0x6, 0x0, 0x9, 0x20084, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r2, 0x6)
set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0x9)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x40000000000002)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0xb92e6000)
fcntl$setstatus(r3, 0x4, 0x4002)
io_setup(0x79d0, &(0x7f0000000000)=<r5=>0x0)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000340)="d4", 0x1}], 0x1, 0x40000c9, 0x0)
io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x19, 0x0, 0x8, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}])
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)

04:37:25 executing program 0:
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xbb, 0x7, 0x7, 0x0, 0xfffffffffffff221, 0x10000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x149, 0x80000000}, 0x0, 0x8, 0x8, 0x5, 0x3, 0x1, 0xea3, 0x0, 0x7f, 0x0, 0xffffffffffffffff}, r1, 0x6, r0, 0x0)
perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x99, 0x1, 0x9, 0x6, 0x0, 0x9, 0x20084, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r2, 0x6)
set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0x9)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x40000000000002)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0xb92e6000)
fcntl$setstatus(r3, 0x4, 0x4002)
io_setup(0x79d0, &(0x7f0000000000)=<r5=>0x0)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000340)="d4", 0x1}], 0x1, 0x40000c9, 0x0)
io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x19, 0x0, 0x8, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}])
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)

04:37:25 executing program 5:
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xbb, 0x7, 0x7, 0x0, 0xfffffffffffff221, 0x10000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x149, 0x80000000}, 0x0, 0x8, 0x8, 0x5, 0x3, 0x1, 0xea3, 0x0, 0x7f, 0x0, 0xffffffffffffffff}, r1, 0x6, r0, 0x0)
perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x99, 0x1, 0x9, 0x6, 0x0, 0x9, 0x20084, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r2, 0x6)
set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0x9)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x40000000000002)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0xb92e6000)
fcntl$setstatus(r3, 0x4, 0x4002)
io_setup(0x79d0, &(0x7f0000000000)=<r5=>0x0)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000340)="d4", 0x1}], 0x1, 0x40000c9, 0x0)
io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x19, 0x0, 0x8, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}])
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)

04:37:25 executing program 2:
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xbb, 0x7, 0x7, 0x0, 0xfffffffffffff221, 0x10000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x149, 0x80000000}, 0x0, 0x8, 0x8, 0x5, 0x3, 0x1, 0xea3, 0x0, 0x7f, 0x0, 0xffffffffffffffff}, r1, 0x6, r0, 0x0)
perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x99, 0x1, 0x9, 0x6, 0x0, 0x9, 0x20084, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r2, 0x6)
set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0x9)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x40000000000002)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0xb92e6000)
fcntl$setstatus(r3, 0x4, 0x4002)
io_setup(0x79d0, &(0x7f0000000000)=<r5=>0x0)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000340)="d4", 0x1}], 0x1, 0x40000c9, 0x0)
io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x19, 0x0, 0x8, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}])
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)

04:37:25 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x4)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x49, &(0x7f0000002880)={@rand_addr=' \x01\x00'}, 0x14)

04:37:25 executing program 2:
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xbb, 0x7, 0x7, 0x0, 0xfffffffffffff221, 0x10000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x149, 0x80000000}, 0x0, 0x8, 0x8, 0x5, 0x3, 0x1, 0xea3, 0x0, 0x7f, 0x0, 0xffffffffffffffff}, r1, 0x6, r0, 0x0)
perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x99, 0x1, 0x9, 0x6, 0x0, 0x9, 0x20084, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r2, 0x6)
set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0x9)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x40000000000002)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0xb92e6000)
fcntl$setstatus(r3, 0x4, 0x4002)
io_setup(0x79d0, &(0x7f0000000000)=<r5=>0x0)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000340)="d4", 0x1}], 0x1, 0x40000c9, 0x0)
io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x19, 0x0, 0x8, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}])
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)

04:37:25 executing program 3:
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xbb, 0x7, 0x7, 0x0, 0xfffffffffffff221, 0x10000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x149, 0x80000000}, 0x0, 0x8, 0x8, 0x5, 0x3, 0x1, 0xea3, 0x0, 0x7f, 0x0, 0xffffffffffffffff}, r1, 0x6, r0, 0x0)
perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x99, 0x1, 0x9, 0x6, 0x0, 0x9, 0x20084, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r2, 0x6)
set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0x9)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x40000000000002)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0xb92e6000)
fcntl$setstatus(r3, 0x4, 0x4002)
io_setup(0x79d0, &(0x7f0000000000)=<r5=>0x0)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000340)="d4", 0x1}], 0x1, 0x40000c9, 0x0)
io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x19, 0x0, 0x8, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}])
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)

04:37:25 executing program 1:
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xbb, 0x7, 0x7, 0x0, 0xfffffffffffff221, 0x10000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x149, 0x80000000}, 0x0, 0x8, 0x8, 0x5, 0x3, 0x1, 0xea3, 0x0, 0x7f, 0x0, 0xffffffffffffffff}, r1, 0x6, r0, 0x0)
perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x99, 0x1, 0x9, 0x6, 0x0, 0x9, 0x20084, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r2, 0x6)
set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0x9)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x40000000000002)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0xb92e6000)
fcntl$setstatus(r3, 0x4, 0x4002)
io_setup(0x79d0, &(0x7f0000000000)=<r5=>0x0)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000340)="d4", 0x1}], 0x1, 0x40000c9, 0x0)
io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x19, 0x0, 0x8, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}])
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)

04:37:25 executing program 5:
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xbb, 0x7, 0x7, 0x0, 0xfffffffffffff221, 0x10000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x149, 0x80000000}, 0x0, 0x8, 0x8, 0x5, 0x3, 0x1, 0xea3, 0x0, 0x7f, 0x0, 0xffffffffffffffff}, r1, 0x6, r0, 0x0)
perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x99, 0x1, 0x9, 0x6, 0x0, 0x9, 0x20084, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r2, 0x6)
set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0x9)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x40000000000002)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0xb92e6000)
fcntl$setstatus(r3, 0x4, 0x4002)
io_setup(0x79d0, &(0x7f0000000000)=<r5=>0x0)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000340)="d4", 0x1}], 0x1, 0x40000c9, 0x0)
io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x19, 0x0, 0x8, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}])
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)

04:37:25 executing program 0:
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xbb, 0x7, 0x7, 0x0, 0xfffffffffffff221, 0x10000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x149, 0x80000000}, 0x0, 0x8, 0x8, 0x5, 0x3, 0x1, 0xea3, 0x0, 0x7f, 0x0, 0xffffffffffffffff}, r1, 0x6, r0, 0x0)
perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x99, 0x1, 0x9, 0x6, 0x0, 0x9, 0x20084, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r2, 0x6)
set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0x9)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x40000000000002)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0xb92e6000)
fcntl$setstatus(r3, 0x4, 0x4002)
io_setup(0x79d0, &(0x7f0000000000)=<r5=>0x0)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000340)="d4", 0x1}], 0x1, 0x40000c9, 0x0)
io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x19, 0x0, 0x8, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}])
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)

04:37:25 executing program 4:
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xbb, 0x7, 0x7, 0x0, 0xfffffffffffff221, 0x10000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x149, 0x80000000}, 0x0, 0x8, 0x8, 0x5, 0x3, 0x1, 0xea3, 0x0, 0x7f, 0x0, 0xffffffffffffffff}, r1, 0x6, r0, 0x0)
perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x99, 0x1, 0x9, 0x6, 0x0, 0x9, 0x20084, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r2, 0x6)
set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0x9)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x40000000000002)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0xb92e6000)
fcntl$setstatus(r3, 0x4, 0x4002)
io_setup(0x79d0, &(0x7f0000000000)=<r5=>0x0)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000340)="d4", 0x1}], 0x1, 0x40000c9, 0x0)
io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x19, 0x0, 0x8, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}])
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)

04:37:25 executing program 3:
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xbb, 0x7, 0x7, 0x0, 0xfffffffffffff221, 0x10000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x149, 0x80000000}, 0x0, 0x8, 0x8, 0x5, 0x3, 0x1, 0xea3, 0x0, 0x7f, 0x0, 0xffffffffffffffff}, r1, 0x6, r0, 0x0)
perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x99, 0x1, 0x9, 0x6, 0x0, 0x9, 0x20084, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r2, 0x6)
set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0x9)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x40000000000002)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0xb92e6000)
fcntl$setstatus(r3, 0x4, 0x4002)
io_setup(0x79d0, &(0x7f0000000000)=<r5=>0x0)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000340)="d4", 0x1}], 0x1, 0x40000c9, 0x0)
io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x19, 0x0, 0x8, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}])
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)

04:37:25 executing program 0:
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xbb, 0x7, 0x7, 0x0, 0xfffffffffffff221, 0x10000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x149, 0x80000000}, 0x0, 0x8, 0x8, 0x5, 0x3, 0x1, 0xea3, 0x0, 0x7f, 0x0, 0xffffffffffffffff}, r1, 0x6, r0, 0x0)
perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x99, 0x1, 0x9, 0x6, 0x0, 0x9, 0x20084, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r2, 0x6)
set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0x9)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x40000000000002)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0xb92e6000)
fcntl$setstatus(r3, 0x4, 0x4002)
io_setup(0x79d0, &(0x7f0000000000)=<r5=>0x0)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000340)="d4", 0x1}], 0x1, 0x40000c9, 0x0)
io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x19, 0x0, 0x8, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}])
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)

04:37:25 executing program 2:
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xbb, 0x7, 0x7, 0x0, 0xfffffffffffff221, 0x10000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x149, 0x80000000}, 0x0, 0x8, 0x8, 0x5, 0x3, 0x1, 0xea3, 0x0, 0x7f, 0x0, 0xffffffffffffffff}, r1, 0x6, r0, 0x0)
perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x99, 0x1, 0x9, 0x6, 0x0, 0x9, 0x20084, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r2, 0x6)
set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0x9)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x40000000000002)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0xb92e6000)
fcntl$setstatus(r3, 0x4, 0x4002)
io_setup(0x79d0, &(0x7f0000000000)=<r5=>0x0)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000340)="d4", 0x1}], 0x1, 0x40000c9, 0x0)
io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x19, 0x0, 0x8, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}])
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)

04:37:25 executing program 1:
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xbb, 0x7, 0x7, 0x0, 0xfffffffffffff221, 0x10000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x149, 0x80000000}, 0x0, 0x8, 0x8, 0x5, 0x3, 0x1, 0xea3, 0x0, 0x7f, 0x0, 0xffffffffffffffff}, r1, 0x6, r0, 0x0)
perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x99, 0x1, 0x9, 0x6, 0x0, 0x9, 0x20084, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r2, 0x6)
set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0x9)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x40000000000002)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0xb92e6000)
fcntl$setstatus(r3, 0x4, 0x4002)
io_setup(0x79d0, &(0x7f0000000000)=<r5=>0x0)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000340)="d4", 0x1}], 0x1, 0x40000c9, 0x0)
io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x19, 0x0, 0x8, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}])
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)

04:37:25 executing program 5:
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xbb, 0x7, 0x7, 0x0, 0xfffffffffffff221, 0x10000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x149, 0x80000000}, 0x0, 0x8, 0x8, 0x5, 0x3, 0x1, 0xea3, 0x0, 0x7f, 0x0, 0xffffffffffffffff}, r1, 0x6, r0, 0x0)
perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x99, 0x1, 0x9, 0x6, 0x0, 0x9, 0x20084, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r2, 0x6)
set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0x9)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x40000000000002)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0xb92e6000)
fcntl$setstatus(r3, 0x4, 0x4002)
io_setup(0x79d0, &(0x7f0000000000)=<r5=>0x0)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000340)="d4", 0x1}], 0x1, 0x40000c9, 0x0)
io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x19, 0x0, 0x8, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}])
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)

04:37:25 executing program 3:
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xbb, 0x7, 0x7, 0x0, 0xfffffffffffff221, 0x10000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x149, 0x80000000}, 0x0, 0x8, 0x8, 0x5, 0x3, 0x1, 0xea3, 0x0, 0x7f, 0x0, 0xffffffffffffffff}, r1, 0x6, r0, 0x0)
perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x99, 0x1, 0x9, 0x6, 0x0, 0x9, 0x20084, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r2, 0x6)
set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0x9)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x40000000000002)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0xb92e6000)
fcntl$setstatus(r3, 0x4, 0x4002)
io_setup(0x79d0, &(0x7f0000000000)=<r5=>0x0)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000340)="d4", 0x1}], 0x1, 0x40000c9, 0x0)
io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x19, 0x0, 0x8, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}])
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)

04:37:25 executing program 4:
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xbb, 0x7, 0x7, 0x0, 0xfffffffffffff221, 0x10000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x149, 0x80000000}, 0x0, 0x8, 0x8, 0x5, 0x3, 0x1, 0xea3, 0x0, 0x7f, 0x0, 0xffffffffffffffff}, r1, 0x6, r0, 0x0)
perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x99, 0x1, 0x9, 0x6, 0x0, 0x9, 0x20084, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r2, 0x6)
set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0x9)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x40000000000002)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0xb92e6000)
fcntl$setstatus(r3, 0x4, 0x4002)
io_setup(0x79d0, &(0x7f0000000000)=<r5=>0x0)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000340)="d4", 0x1}], 0x1, 0x40000c9, 0x0)
io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x19, 0x0, 0x8, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}])
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)

04:37:25 executing program 0:
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xbb, 0x7, 0x7, 0x0, 0xfffffffffffff221, 0x10000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x149, 0x80000000}, 0x0, 0x8, 0x8, 0x5, 0x3, 0x1, 0xea3, 0x0, 0x7f, 0x0, 0xffffffffffffffff}, r1, 0x6, r0, 0x0)
perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x99, 0x1, 0x9, 0x6, 0x0, 0x9, 0x20084, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r2, 0x6)
set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0x9)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x40000000000002)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0xb92e6000)
fcntl$setstatus(r3, 0x4, 0x4002)
io_setup(0x79d0, &(0x7f0000000000)=<r5=>0x0)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000340)="d4", 0x1}], 0x1, 0x40000c9, 0x0)
io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x19, 0x0, 0x8, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}])
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)

04:37:25 executing program 1:
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xbb, 0x7, 0x7, 0x0, 0xfffffffffffff221, 0x10000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x149, 0x80000000}, 0x0, 0x8, 0x8, 0x5, 0x3, 0x1, 0xea3, 0x0, 0x7f, 0x0, 0xffffffffffffffff}, r1, 0x6, r0, 0x0)
perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x99, 0x1, 0x9, 0x6, 0x0, 0x9, 0x20084, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r2, 0x6)
set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0x9)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x40000000000002)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0xb92e6000)
fcntl$setstatus(r3, 0x4, 0x4002)
io_setup(0x79d0, &(0x7f0000000000)=<r5=>0x0)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000340)="d4", 0x1}], 0x1, 0x40000c9, 0x0)
io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x19, 0x0, 0x8, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}])
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)

04:37:25 executing program 2:
syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0))
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000004a80))

[   30.392058][    C1] hrtimer: interrupt took 27845 ns
04:37:25 executing program 0:
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xbb, 0x7, 0x7, 0x0, 0xfffffffffffff221, 0x10000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x149, 0x80000000}, 0x0, 0x8, 0x8, 0x5, 0x3, 0x1, 0xea3, 0x0, 0x7f, 0x0, 0xffffffffffffffff}, r1, 0x6, r0, 0x0)
perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x99, 0x1, 0x9, 0x6, 0x0, 0x9, 0x20084, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r2, 0x6)
set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0x9)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x40000000000002)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0xb92e6000)
fcntl$setstatus(r3, 0x4, 0x4002)
io_setup(0x79d0, &(0x7f0000000000)=<r5=>0x0)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000340)="d4", 0x1}], 0x1, 0x40000c9, 0x0)
io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x19, 0x0, 0x8, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}])
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)

04:37:25 executing program 3:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="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", 0x1b5}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

04:37:25 executing program 5:
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xbb, 0x7, 0x7, 0x0, 0xfffffffffffff221, 0x10000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x149, 0x80000000}, 0x0, 0x8, 0x8, 0x5, 0x3, 0x1, 0xea3, 0x0, 0x7f, 0x0, 0xffffffffffffffff}, r1, 0x6, r0, 0x0)
perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x99, 0x1, 0x9, 0x6, 0x0, 0x9, 0x20084, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r2, 0x6)
set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0x9)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x40000000000002)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0xb92e6000)
fcntl$setstatus(r3, 0x4, 0x4002)
io_setup(0x79d0, &(0x7f0000000000)=<r5=>0x0)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000340)="d4", 0x1}], 0x1, 0x40000c9, 0x0)
io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x19, 0x0, 0x8, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}])
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)

04:37:25 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = io_uring_setup(0x34ac, &(0x7f0000000200))
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)

04:37:25 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000080)='./file0/../file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f00000003c0)=<r1=>0x0)
r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = open(&(0x7f0000000180)='./bus\x00', 0x100000169042, 0x0)
ftruncate(r3, 0x10099b8)
io_submit(r1, 0x3, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}])

04:37:25 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = io_uring_setup(0x34ac, &(0x7f0000000200))
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)

04:37:25 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = io_uring_setup(0x34ac, &(0x7f0000000200))
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)

04:37:25 executing program 1:
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xbb, 0x7, 0x7, 0x0, 0xfffffffffffff221, 0x10000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x149, 0x80000000}, 0x0, 0x8, 0x8, 0x5, 0x3, 0x1, 0xea3, 0x0, 0x7f, 0x0, 0xffffffffffffffff}, r1, 0x6, r0, 0x0)
perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x99, 0x1, 0x9, 0x6, 0x0, 0x9, 0x20084, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r2, 0x6)
set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0x9)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x40000000000002)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0xb92e6000)
fcntl$setstatus(r3, 0x4, 0x4002)
io_setup(0x79d0, &(0x7f0000000000)=<r5=>0x0)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000340)="d4", 0x1}], 0x1, 0x40000c9, 0x0)
io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x19, 0x0, 0x8, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}])
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)

[   30.527648][ T4781] loop4: detected capacity change from 0 to 16
04:37:25 executing program 3:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="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", 0x1b5}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

04:37:25 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = io_uring_setup(0x34ac, &(0x7f0000000200))
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)

04:37:26 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0xe, &(0x7f0000000140), 0x4)

04:37:26 executing program 5:
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xbb, 0x7, 0x7, 0x0, 0xfffffffffffff221, 0x10000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x149, 0x80000000}, 0x0, 0x8, 0x8, 0x5, 0x3, 0x1, 0xea3, 0x0, 0x7f, 0x0, 0xffffffffffffffff}, r1, 0x6, r0, 0x0)
perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x99, 0x1, 0x9, 0x6, 0x0, 0x9, 0x20084, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r2, 0x6)
set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0x9)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x40000000000002)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0xb92e6000)
fcntl$setstatus(r3, 0x4, 0x4002)
io_setup(0x79d0, &(0x7f0000000000)=<r5=>0x0)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000340)="d4", 0x1}], 0x1, 0x40000c9, 0x0)
io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x19, 0x0, 0x8, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}])
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)

04:37:26 executing program 0:
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xbb, 0x7, 0x7, 0x0, 0xfffffffffffff221, 0x10000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x149, 0x80000000}, 0x0, 0x8, 0x8, 0x5, 0x3, 0x1, 0xea3, 0x0, 0x7f, 0x0, 0xffffffffffffffff}, r1, 0x6, r0, 0x0)
perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x99, 0x1, 0x9, 0x6, 0x0, 0x9, 0x20084, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r2, 0x6)
set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0x9)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x40000000000002)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0xb92e6000)
fcntl$setstatus(r3, 0x4, 0x4002)
io_setup(0x79d0, &(0x7f0000000000)=<r5=>0x0)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000340)="d4", 0x1}], 0x1, 0x40000c9, 0x0)
io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x19, 0x0, 0x8, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}])
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)

[   30.580879][ T4781] attempt to access beyond end of device
[   30.580879][ T4781] loop4: rw=34817, want=184, limit=16
04:37:26 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0xe, &(0x7f0000000140), 0x4)

[   30.658673][ T4810] attempt to access beyond end of device
[   30.658673][ T4810] loop4: rw=34817, want=184, limit=16
04:37:26 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0xe, &(0x7f0000000140), 0x4)

04:37:26 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0xe, &(0x7f0000000140), 0x4)

04:37:26 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0xe, &(0x7f0000000140), 0x4)

04:37:26 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000080)='./file0/../file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f00000003c0)=<r1=>0x0)
r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = open(&(0x7f0000000180)='./bus\x00', 0x100000169042, 0x0)
ftruncate(r3, 0x10099b8)
io_submit(r1, 0x3, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}])

04:37:26 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0xe, &(0x7f0000000140), 0x4)

04:37:26 executing program 1:
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xbb, 0x7, 0x7, 0x0, 0xfffffffffffff221, 0x10000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x149, 0x80000000}, 0x0, 0x8, 0x8, 0x5, 0x3, 0x1, 0xea3, 0x0, 0x7f, 0x0, 0xffffffffffffffff}, r1, 0x6, r0, 0x0)
perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x99, 0x1, 0x9, 0x6, 0x0, 0x9, 0x20084, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r2, 0x6)
set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0x9)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x40000000000002)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0xb92e6000)
fcntl$setstatus(r3, 0x4, 0x4002)
io_setup(0x79d0, &(0x7f0000000000)=<r5=>0x0)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000340)="d4", 0x1}], 0x1, 0x40000c9, 0x0)
io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x19, 0x0, 0x8, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}])
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)

[   30.783561][ T1787] attempt to access beyond end of device
[   30.783561][ T1787] loop4: rw=1, want=256, limit=16
[   30.849509][ T4851] loop4: detected capacity change from 0 to 16
[   30.868332][ T4851] attempt to access beyond end of device
[   30.868332][ T4851] loop4: rw=34817, want=184, limit=16
[   30.958476][  T104] attempt to access beyond end of device
[   30.958476][  T104] loop4: rw=1, want=256, limit=16
04:37:28 executing program 3:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f841958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcce412245deacb1f630e4052b9d6c20a45c772242f63a6bf41a08f4951d60a7038169b31799b68287a1a7fbdd923d3c11e55228ad8fb85fd85f899a2704fbf8751fac825b6e92f3469a9eb2fea5693a4f2e86d6ef59969cb556fdea2f958396d019b198a549d2cbca5b1f867d52f165c86d633d762f31c9aedab95e9d0cff8954935bfb5bafa694ffd244ff2ad0b8b47eeb23d8d75df2e17b690e4da113431ae405d0670a1fe8398cc02a52f6f3b9dad9a2b9e43561d81102e091816665e6e862b2082109e56cf4fa09d84f6be47ee451557f0cafc414b952e025dac3abfbbfd1cdb84b16b2c358617bfab661fb39f585279fde3eae1dd69f22a8afd21bd5c8f7e602d68638a4d522f184c07c3941e43eb4b4b791e1822a5cc143180e43fc6", 0x1b5}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

04:37:28 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0xe, &(0x7f0000000140), 0x4)

04:37:28 executing program 0:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000080)='./file0/../file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f00000003c0)=<r1=>0x0)
r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = open(&(0x7f0000000180)='./bus\x00', 0x100000169042, 0x0)
ftruncate(r3, 0x10099b8)
io_submit(r1, 0x3, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}])

04:37:28 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000080)='./file0/../file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f00000003c0)=<r1=>0x0)
r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = open(&(0x7f0000000180)='./bus\x00', 0x100000169042, 0x0)
ftruncate(r3, 0x10099b8)
io_submit(r1, 0x3, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}])

04:37:28 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000080)='./file0/../file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f00000003c0)=<r1=>0x0)
r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = open(&(0x7f0000000180)='./bus\x00', 0x100000169042, 0x0)
ftruncate(r3, 0x10099b8)
io_submit(r1, 0x3, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}])

04:37:28 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000080)='./file0/../file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f00000003c0)=<r1=>0x0)
r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = open(&(0x7f0000000180)='./bus\x00', 0x100000169042, 0x0)
ftruncate(r3, 0x10099b8)
io_submit(r1, 0x3, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}])

04:37:29 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0xe, &(0x7f0000000140), 0x4)

[   33.609442][ T4866] loop4: detected capacity change from 0 to 16
[   33.620171][ T4872] loop1: detected capacity change from 0 to 16
[   33.624266][ T4875] loop0: detected capacity change from 0 to 16
[   33.629912][ T4873] loop2: detected capacity change from 0 to 16
[   33.670562][ T4875] attempt to access beyond end of device
[   33.670562][ T4875] loop0: rw=34817, want=184, limit=16
[   33.678653][ T4873] attempt to access beyond end of device
[   33.678653][ T4873] loop2: rw=34817, want=184, limit=16
[   33.700899][ T4866] attempt to access beyond end of device
[   33.700899][ T4866] loop4: rw=34817, want=184, limit=16
[   33.713878][ T4872] attempt to access beyond end of device
04:37:29 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0xe, &(0x7f0000000140), 0x4)

04:37:29 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0xe, &(0x7f0000000140), 0x4)

[   33.713878][ T4872] loop1: rw=34817, want=184, limit=16
04:37:29 executing program 0:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000080)='./file0/../file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f00000003c0)=<r1=>0x0)
r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = open(&(0x7f0000000180)='./bus\x00', 0x100000169042, 0x0)
ftruncate(r3, 0x10099b8)
io_submit(r1, 0x3, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}])

04:37:29 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
sched_setattr(0x0, &(0x7f00000021c0)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
read(r1, &(0x7f0000000000)=""/23, 0x17)
vmsplice(r2, &(0x7f00000003c0)=[{&(0x7f00000000c0)="c1", 0x1}], 0x1, 0x0)

04:37:29 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000080)='./file0/../file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f00000003c0)=<r1=>0x0)
r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = open(&(0x7f0000000180)='./bus\x00', 0x100000169042, 0x0)
ftruncate(r3, 0x10099b8)
io_submit(r1, 0x3, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}])

[   33.778189][ T1782] attempt to access beyond end of device
[   33.778189][ T1782] loop0: rw=1, want=256, limit=16
[   33.837783][ T4911] loop0: detected capacity change from 0 to 16
[   33.845639][ T4909] ==================================================================
[   33.853723][ T4909] BUG: KCSAN: data-race in copy_page_to_iter / fat_set_state
[   33.861172][ T4909] 
[   33.863600][ T4909] write to 0xffff8881183f0025 of 1 bytes by task 4911 on cpu 1:
[   33.871249][ T4909]  fat_set_state+0x16c/0x1d0
[   33.875869][ T4909]  fat_fill_super+0x263a/0x2a80
[   33.880784][ T4909]  vfat_fill_super+0x2c/0x40
[   33.885352][ T4909]  mount_bdev+0x1e8/0x290
[   33.889661][ T4909]  vfat_mount+0x2d/0x40
[   33.893795][ T4909]  legacy_get_tree+0x70/0xc0
[   33.898362][ T4909]  vfs_get_tree+0x4a/0x1a0
[   33.902754][ T4909]  path_mount+0x11d4/0x1ce0
[   33.907231][ T4909]  __se_sys_mount+0x23d/0x2e0
[   33.911881][ T4909]  __x64_sys_mount+0x63/0x70
[   33.916445][ T4909]  do_syscall_64+0x3d/0x90
[   33.920840][ T4909]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[   33.926728][ T4909] 
[   33.929044][ T4909] read to 0xffff8881183f0000 of 1024 bytes by task 4909 on cpu 0:
[   33.936818][ T4909]  copy_page_to_iter+0x2e1/0x940
[   33.941740][ T4909]  filemap_read+0xef6/0x1220
[   33.946314][ T4909]  generic_file_read_iter+0x75/0x2c0
[   33.951574][ T4909]  blkdev_read_iter+0xb9/0xf0
[   33.956323][ T4909]  vfs_read+0x565/0x5d0
[   33.960458][ T4909]  ksys_read+0xce/0x180
[   33.964586][ T4909]  __x64_sys_read+0x3e/0x50
[   33.969064][ T4909]  do_syscall_64+0x3d/0x90
[   33.973456][ T4909]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[   33.979357][ T4909] 
[   33.981661][ T4909] Reported by Kernel Concurrency Sanitizer on:
[   33.987805][ T4909] CPU: 0 PID: 4909 Comm: systemd-udevd Not tainted 5.14.0-rc6-syzkaller #0
[   33.996378][ T4909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   34.006412][ T4909] ==================================================================
[   34.030837][ T4922] loop4: detected capacity change from 0 to 16
04:37:32 executing program 3:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f841958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcce412245deacb1f630e4052b9d6c20a45c772242f63a6bf41a08f4951d60a7038169b31799b68287a1a7fbdd923d3c11e55228ad8fb85fd85f899a2704fbf8751fac825b6e92f3469a9eb2fea5693a4f2e86d6ef59969cb556fdea2f958396d019b198a549d2cbca5b1f867d52f165c86d633d762f31c9aedab95e9d0cff8954935bfb5bafa694ffd244ff2ad0b8b47eeb23d8d75df2e17b690e4da113431ae405d0670a1fe8398cc02a52f6f3b9dad9a2b9e43561d81102e091816665e6e862b2082109e56cf4fa09d84f6be47ee451557f0cafc414b952e025dac3abfbbfd1cdb84b16b2c358617bfab661fb39f585279fde3eae1dd69f22a8afd21bd5c8f7e602d68638a4d522f184c07c3941e43eb4b4b791e1822a5cc143180e43fc6", 0x1b5}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

04:37:32 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000080)='./file0/../file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f00000003c0)=<r1=>0x0)
r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = open(&(0x7f0000000180)='./bus\x00', 0x100000169042, 0x0)
ftruncate(r3, 0x10099b8)
io_submit(r1, 0x3, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}])

04:37:32 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000080)='./file0/../file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f00000003c0)=<r1=>0x0)
r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = open(&(0x7f0000000180)='./bus\x00', 0x100000169042, 0x0)
ftruncate(r3, 0x10099b8)
io_submit(r1, 0x3, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}])

04:37:32 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
sched_setattr(0x0, &(0x7f00000021c0)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
read(r1, &(0x7f0000000000)=""/23, 0x17)
vmsplice(r2, &(0x7f00000003c0)=[{&(0x7f00000000c0)="c1", 0x1}], 0x1, 0x0)

04:37:32 executing program 0:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000080)='./file0/../file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f00000003c0)=<r1=>0x0)
r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = open(&(0x7f0000000180)='./bus\x00', 0x100000169042, 0x0)
ftruncate(r3, 0x10099b8)
io_submit(r1, 0x3, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}])

04:37:32 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
sched_setattr(0x0, &(0x7f00000021c0)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
read(r1, &(0x7f0000000000)=""/23, 0x17)
vmsplice(r2, &(0x7f00000003c0)=[{&(0x7f00000000c0)="c1", 0x1}], 0x1, 0x0)

[   36.632156][ T4945] loop2: detected capacity change from 0 to 16
[   36.639078][ T4948] loop0: detected capacity change from 0 to 16
[   36.640267][ T4946] loop1: detected capacity change from 0 to 16
[   36.667265][ T4945] handle_bad_sector: 7 callbacks suppressed
[   36.667278][ T4945] attempt to access beyond end of device
04:37:32 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
sched_setattr(0x0, &(0x7f00000021c0)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
read(r1, &(0x7f0000000000)=""/23, 0x17)
vmsplice(r2, &(0x7f00000003c0)=[{&(0x7f00000000c0)="c1", 0x1}], 0x1, 0x0)

04:37:32 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
sched_setattr(0x0, &(0x7f00000021c0)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
read(r1, &(0x7f0000000000)=""/23, 0x17)
vmsplice(r2, &(0x7f00000003c0)=[{&(0x7f00000000c0)="c1", 0x1}], 0x1, 0x0)

04:37:32 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000080)='./file0/../file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f00000003c0)=<r1=>0x0)
r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = open(&(0x7f0000000180)='./bus\x00', 0x100000169042, 0x0)
ftruncate(r3, 0x10099b8)
io_submit(r1, 0x3, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}])

[   36.667278][ T4945] loop2: rw=34817, want=184, limit=16
[   36.684859][ T4948] attempt to access beyond end of device
[   36.684859][ T4948] loop0: rw=34817, want=184, limit=16
[   36.707753][ T4946] attempt to access beyond end of device
[   36.707753][ T4946] loop1: rw=34817, want=184, limit=16
04:37:32 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"})
process_vm_writev(0x0, &(0x7f0000001c40)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1, 0x0, 0x0, 0x0)

04:37:32 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000080)='./file0/../file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f00000003c0)=<r1=>0x0)
r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = open(&(0x7f0000000180)='./bus\x00', 0x100000169042, 0x0)
ftruncate(r3, 0x10099b8)
io_submit(r1, 0x3, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}])

04:37:32 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
sched_setattr(0x0, &(0x7f00000021c0)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
read(r1, &(0x7f0000000000)=""/23, 0x17)
vmsplice(r2, &(0x7f00000003c0)=[{&(0x7f00000000c0)="c1", 0x1}], 0x1, 0x0)

[   36.755991][  T104] attempt to access beyond end of device
[   36.755991][  T104] loop2: rw=1, want=256, limit=16
[   36.777223][  T104] attempt to access beyond end of device
[   36.777223][  T104] loop0: rw=1, want=256, limit=16
[   36.788800][  T104] attempt to access beyond end of device
[   36.788800][  T104] loop1: rw=1, want=256, limit=16
[   36.834495][ T4988] loop2: detected capacity change from 0 to 16
[   36.859885][ T4997] loop1: detected capacity change from 0 to 16
[   36.889693][ T4997] attempt to access beyond end of device
[   36.889693][ T4997] loop1: rw=34817, want=184, limit=16
[   36.895539][ T4988] attempt to access beyond end of device
[   36.895539][ T4988] loop2: rw=34817, want=184, limit=16
[   36.996940][ T1787] attempt to access beyond end of device
[   36.996940][ T1787] loop1: rw=1, want=256, limit=16
[   37.016133][ T1787] attempt to access beyond end of device
[   37.016133][ T1787] loop2: rw=1, want=256, limit=16
04:37:35 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000551bed0df4655fd5f4655fd5f4655f00000000000004000428dce02cdc2476c0b8db2daee2d30b8cc60e32727c5e64a126f909832ca130368b114397b0a72e4c892d6cab33735569f97b66418522da8fcf420a318e49ba7f31590db61d07d139d75ef2cef8849a1760857c2426fbbb215494b1d9a3947f298d2cb432f22ebc0976c5c8b9973c17a9891c3f82e4a7deb7", 0x95, 0x2100}, {&(0x7f0000000440)=' \x00', 0x2, 0x2180}], 0x0, &(0x7f0000012c00))

04:37:35 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
sched_setattr(0x0, &(0x7f00000021c0)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
read(r1, &(0x7f0000000000)=""/23, 0x17)
vmsplice(r2, &(0x7f00000003c0)=[{&(0x7f00000000c0)="c1", 0x1}], 0x1, 0x0)

04:37:35 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"})
process_vm_writev(0x0, &(0x7f0000001c40)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1, 0x0, 0x0, 0x0)

04:37:35 executing program 4:
setfsuid(0xee00)
keyctl$restrict_keyring(0x1d, 0xfffffffffffffffb, 0x0, 0x0)

04:37:35 executing program 1:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x3f, &(0x7f0000000280)="c4c69107787b049ef7a22899f37ba7baaadb21df2275cd270e4f896abedc792bfbd41be758be8de570563117df5cb67142572be0875d0403c85be3ba1a1f36"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
clone(0x80000000, 0x0, 0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

04:37:35 executing program 3:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = getpgid(0x0)
fcntl$lock(r0, 0x24, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, r1})

04:37:35 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"})
process_vm_writev(0x0, &(0x7f0000001c40)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1, 0x0, 0x0, 0x0)

04:37:35 executing program 4:
setfsuid(0xee00)
keyctl$restrict_keyring(0x1d, 0xfffffffffffffffb, 0x0, 0x0)

04:37:35 executing program 3:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = getpgid(0x0)
fcntl$lock(r0, 0x24, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, r1})

04:37:35 executing program 5:
setfsuid(0xee00)
keyctl$restrict_keyring(0x1d, 0xfffffffffffffffb, 0x0, 0x0)

04:37:35 executing program 4:
setfsuid(0xee00)
keyctl$restrict_keyring(0x1d, 0xfffffffffffffffb, 0x0, 0x0)

[   39.671475][ T5022] loop2: detected capacity change from 0 to 512
[   39.687142][ T5022] EXT4-fs error (device loop2): ext4_fill_super:4956: inode #2: comm syz-executor.2: iget: bad extended attribute block 2592405710
[   39.700809][ T5022] EXT4-fs (loop2): get root inode failed
[   39.706610][ T5022] EXT4-fs (loop2): mount failed
04:37:35 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"})
process_vm_writev(0x0, &(0x7f0000001c40)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1, 0x0, 0x0, 0x0)

04:37:35 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000551bed0df4655fd5f4655fd5f4655f00000000000004000428dce02cdc2476c0b8db2daee2d30b8cc60e32727c5e64a126f909832ca130368b114397b0a72e4c892d6cab33735569f97b66418522da8fcf420a318e49ba7f31590db61d07d139d75ef2cef8849a1760857c2426fbbb215494b1d9a3947f298d2cb432f22ebc0976c5c8b9973c17a9891c3f82e4a7deb7", 0x95, 0x2100}, {&(0x7f0000000440)=' \x00', 0x2, 0x2180}], 0x0, &(0x7f0000012c00))

04:37:35 executing program 3:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = getpgid(0x0)
fcntl$lock(r0, 0x24, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, r1})

04:37:35 executing program 5:
setfsuid(0xee00)
keyctl$restrict_keyring(0x1d, 0xfffffffffffffffb, 0x0, 0x0)

04:37:35 executing program 4:
setfsuid(0xee00)
keyctl$restrict_keyring(0x1d, 0xfffffffffffffffb, 0x0, 0x0)

[   39.824134][ T5065] loop2: detected capacity change from 0 to 512
[   39.847785][ T5065] EXT4-fs error (device loop2): ext4_fill_super:4956: inode #2: comm syz-executor.2: iget: bad extended attribute block 2592405710
[   39.861341][ T5065] EXT4-fs (loop2): get root inode failed
[   39.867030][ T5065] EXT4-fs (loop2): mount failed
04:37:38 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002380), 0x4)
sendmmsg(r0, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)=[{0x10, 0x1, 0x3d}], 0x10}}], 0x2, 0x0)

04:37:38 executing program 0:
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x101910b00, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000580)='sockfs\x00', 0x0, &(0x7f0000000080)='u\xc5\xe2\x9a\x04\xcb\xf2\xc3\xa3\x04&f\xb2\xeb\xba\x98\xfeg\x86\x10\x197\xfb\xde\xd5\x8d\xf9$\xa1\x12\xd5D\xf4\nZB\xf8\xec\x8d\xf3\xfa2\xd4\x94yQ|\xb7\xe4xS\xa6A\xd0 L\xd5e\xc8\xe2C\xba\xc7\xab\xa1\xdc\xaaX\x99Rk\f\xb3\xdd\x99\xf1\x9b\x1d\xce\x06\bp1oF\xb7\x12\x82\xd4\xc3`\x92\x9a\xb6l~\"\x85\x83\xe68\x90\xec\xb0\xbaR\b\x15\xf4M&}PC-\xd4\xc8\xc0d\xe4\'\x8c\x1d-\xab\xb1nG\x8e\x8f\x1a$KU\x15\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00')
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0x1cc})
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x0, 0x2, 0x0)

04:37:38 executing program 3:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = getpgid(0x0)
fcntl$lock(r0, 0x24, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, r1})

04:37:38 executing program 5:
setfsuid(0xee00)
keyctl$restrict_keyring(0x1d, 0xfffffffffffffffb, 0x0, 0x0)

04:37:38 executing program 4:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x8a483, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
dup2(r1, r0)

04:37:38 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000551bed0df4655fd5f4655fd5f4655f00000000000004000428dce02cdc2476c0b8db2daee2d30b8cc60e32727c5e64a126f909832ca130368b114397b0a72e4c892d6cab33735569f97b66418522da8fcf420a318e49ba7f31590db61d07d139d75ef2cef8849a1760857c2426fbbb215494b1d9a3947f298d2cb432f22ebc0976c5c8b9973c17a9891c3f82e4a7deb7", 0x95, 0x2100}, {&(0x7f0000000440)=' \x00', 0x2, 0x2180}], 0x0, &(0x7f0000012c00))

04:37:38 executing program 5:
clone(0x200300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x14, &(0x7f0000000000))
ptrace(0x10, r0)
ptrace(0x11, r0)

[   42.686955][ T5082] loop2: detected capacity change from 0 to 512
[   42.691881][ T5085] sockfs: Unknown parameter 'u����ã&f�뺘�g�7��Ս�$��D�
[   42.691881][ T5085] ZB����2ԔyQ|��xS�A� L�e��C�ǫ�ܪX�Rk�ݙ��p1oF����`���l~"���8�찺R�M&}PC-���d�'�-��nG��$KU'
[   42.717594][ T5095] sockfs: Unknown parameter 'u����ã&f�뺘�g�7��Ս�$��D�
[   42.717594][ T5095] ZB����2ԔyQ|��xS�A� L�e��C�ǫ�ܪX�Rk�ݙ��p1oF����`���l~"���8�찺R�M&}PC-���d�'�-��nG��$KU'
04:37:38 executing program 4:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x8a483, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
dup2(r1, r0)

04:37:38 executing program 3:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x8a483, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
dup2(r1, r0)

04:37:38 executing program 0:
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x101910b00, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000580)='sockfs\x00', 0x0, &(0x7f0000000080)='u\xc5\xe2\x9a\x04\xcb\xf2\xc3\xa3\x04&f\xb2\xeb\xba\x98\xfeg\x86\x10\x197\xfb\xde\xd5\x8d\xf9$\xa1\x12\xd5D\xf4\nZB\xf8\xec\x8d\xf3\xfa2\xd4\x94yQ|\xb7\xe4xS\xa6A\xd0 L\xd5e\xc8\xe2C\xba\xc7\xab\xa1\xdc\xaaX\x99Rk\f\xb3\xdd\x99\xf1\x9b\x1d\xce\x06\bp1oF\xb7\x12\x82\xd4\xc3`\x92\x9a\xb6l~\"\x85\x83\xe68\x90\xec\xb0\xbaR\b\x15\xf4M&}PC-\xd4\xc8\xc0d\xe4\'\x8c\x1d-\xab\xb1nG\x8e\x8f\x1a$KU\x15\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00')
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0x1cc})
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x0, 0x2, 0x0)

[   42.742293][ T5082] EXT4-fs error (device loop2): ext4_fill_super:4956: inode #2: comm syz-executor.2: iget: bad extended attribute block 2592405710
[   42.755910][ T5082] EXT4-fs (loop2): get root inode failed
[   42.761586][ T5082] EXT4-fs (loop2): mount failed
04:37:38 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002380), 0x4)
sendmmsg(r0, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)=[{0x10, 0x1, 0x3d}], 0x10}}], 0x2, 0x0)

04:37:38 executing program 5:
clone(0x200300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x14, &(0x7f0000000000))
ptrace(0x10, r0)
ptrace(0x11, r0)

04:37:38 executing program 4:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x8a483, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
dup2(r1, r0)

04:37:38 executing program 3:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x8a483, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
dup2(r1, r0)

[   42.792903][ T5109] sockfs: Unknown parameter 'u����ã&f�뺘�g�7��Ս�$��D�
[   42.792903][ T5109] ZB����2ԔyQ|��xS�A� L�e��C�ǫ�ܪX�Rk�ݙ��p1oF����`���l~"���8�찺R�M&}PC-���d�'�-��nG��$KU'
04:37:38 executing program 5:
clone(0x200300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x14, &(0x7f0000000000))
ptrace(0x10, r0)
ptrace(0x11, r0)

04:37:38 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002380), 0x4)
sendmmsg(r0, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)=[{0x10, 0x1, 0x3d}], 0x10}}], 0x2, 0x0)

04:37:38 executing program 5:
clone(0x200300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x14, &(0x7f0000000000))
ptrace(0x10, r0)
ptrace(0x11, r0)

04:37:38 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000551bed0df4655fd5f4655fd5f4655f00000000000004000428dce02cdc2476c0b8db2daee2d30b8cc60e32727c5e64a126f909832ca130368b114397b0a72e4c892d6cab33735569f97b66418522da8fcf420a318e49ba7f31590db61d07d139d75ef2cef8849a1760857c2426fbbb215494b1d9a3947f298d2cb432f22ebc0976c5c8b9973c17a9891c3f82e4a7deb7", 0x95, 0x2100}, {&(0x7f0000000440)=' \x00', 0x2, 0x2180}], 0x0, &(0x7f0000012c00))

04:37:38 executing program 3:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x8a483, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
dup2(r1, r0)

04:37:38 executing program 5:
mprotect(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x0)

04:37:38 executing program 4:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x8a483, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
dup2(r1, r0)

04:37:38 executing program 0:
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x101910b00, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000580)='sockfs\x00', 0x0, &(0x7f0000000080)='u\xc5\xe2\x9a\x04\xcb\xf2\xc3\xa3\x04&f\xb2\xeb\xba\x98\xfeg\x86\x10\x197\xfb\xde\xd5\x8d\xf9$\xa1\x12\xd5D\xf4\nZB\xf8\xec\x8d\xf3\xfa2\xd4\x94yQ|\xb7\xe4xS\xa6A\xd0 L\xd5e\xc8\xe2C\xba\xc7\xab\xa1\xdc\xaaX\x99Rk\f\xb3\xdd\x99\xf1\x9b\x1d\xce\x06\bp1oF\xb7\x12\x82\xd4\xc3`\x92\x9a\xb6l~\"\x85\x83\xe68\x90\xec\xb0\xbaR\b\x15\xf4M&}PC-\xd4\xc8\xc0d\xe4\'\x8c\x1d-\xab\xb1nG\x8e\x8f\x1a$KU\x15\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00')
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0x1cc})
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x0, 0x2, 0x0)

04:37:38 executing program 3:
r0 = semget$private(0x0, 0x5, 0x0)
semop(r0, &(0x7f0000000080)=[{0x0, 0x5}, {}], 0x2)
semop(r0, &(0x7f0000000000)=[{0x0, 0xfffa}, {0x0, 0x7f}], 0x2)
semop(r0, &(0x7f00000002c0)=[{0x0, 0x400}], 0x1)

04:37:38 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002380), 0x4)
sendmmsg(r0, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)=[{0x10, 0x1, 0x3d}], 0x10}}], 0x2, 0x0)

04:37:38 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = epoll_create1(0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40345410, &(0x7f0000000000)={0x1})
ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x5420)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000140))
epoll_pwait(r2, &(0x7f0000000240)=[{}], 0x1, 0x101, 0x0, 0x0)
poll(&(0x7f0000000080)=[{r2}], 0x1, 0x100)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000001400)={0x1})

04:37:38 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000008000b55f000000208600"})
r1 = socket$inet(0x2, 0x3, 0x3)
setsockopt$inet_mreqn(r1, 0x0, 0x27, 0x0, 0x0)

[   42.924624][ T5150] loop2: detected capacity change from 0 to 512
[   42.948599][ T5156] sockfs: Unknown parameter 'u����ã&f�뺘�g�7��Ս�$��D�
[   42.948599][ T5156] ZB����2ԔyQ|��xS�A� L�e��C�ǫ�ܪX�Rk�ݙ��p1oF����`���l~"���8�찺R�M&}PC-���d�'�-��nG��$KU'
04:37:38 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000000)={0x80})

04:37:38 executing program 0:
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x101910b00, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000580)='sockfs\x00', 0x0, &(0x7f0000000080)='u\xc5\xe2\x9a\x04\xcb\xf2\xc3\xa3\x04&f\xb2\xeb\xba\x98\xfeg\x86\x10\x197\xfb\xde\xd5\x8d\xf9$\xa1\x12\xd5D\xf4\nZB\xf8\xec\x8d\xf3\xfa2\xd4\x94yQ|\xb7\xe4xS\xa6A\xd0 L\xd5e\xc8\xe2C\xba\xc7\xab\xa1\xdc\xaaX\x99Rk\f\xb3\xdd\x99\xf1\x9b\x1d\xce\x06\bp1oF\xb7\x12\x82\xd4\xc3`\x92\x9a\xb6l~\"\x85\x83\xe68\x90\xec\xb0\xbaR\b\x15\xf4M&}PC-\xd4\xc8\xc0d\xe4\'\x8c\x1d-\xab\xb1nG\x8e\x8f\x1a$KU\x15\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00')
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0x1cc})
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x0, 0x2, 0x0)

[   42.978762][ T5150] EXT4-fs error (device loop2): ext4_fill_super:4956: inode #2: comm syz-executor.2: iget: bad extended attribute block 2592405710
[   42.992275][ T5150] EXT4-fs (loop2): get root inode failed
[   42.998005][ T5150] EXT4-fs (loop2): mount failed
04:37:38 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000000)={0x80})

04:37:38 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000008000b55f000000208600"})
r1 = socket$inet(0x2, 0x3, 0x3)
setsockopt$inet_mreqn(r1, 0x0, 0x27, 0x0, 0x0)

04:37:38 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
chroot(&(0x7f0000000280)='./file0\x00')
umount2(&(0x7f00000000c0)='./file0\x00', 0x2)
chroot(&(0x7f0000000f40)='./file0/../file0\x00')

04:37:38 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000000)={0x80})

[   43.067797][ T5185] sockfs: Unknown parameter 'u����ã&f�뺘�g�7��Ս�$��D�
[   43.067797][ T5185] ZB����2ԔyQ|��xS�A� L�e��C�ǫ�ܪX�Rk�ݙ��p1oF����`���l~"���8�찺R�M&}PC-���d�'�-��nG��$KU'
04:37:38 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000000)={0x80})

04:37:38 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100000001}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000080), 0xfffffe58)
link(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0)
syz_mount_image$nfs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

[   43.126216][ T5198] new mount options do not match the existing superblock, will be ignored
[   43.159806][ T5198] new mount options do not match the existing superblock, will be ignored
[   43.344855][ T5166] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[   43.352892][ T5166] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x000000005420709c
[   43.364377][ T5166] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[   43.372483][ T5166] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x000000005420709c
[   43.435829][ T5166] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[   43.443831][ T5166] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x000000005420709c
[   43.455282][ T5166] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[   43.463273][ T5166] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x000000005420709c
04:37:39 executing program 3:
r0 = semget$private(0x0, 0x5, 0x0)
semop(r0, &(0x7f0000000080)=[{0x0, 0x5}, {}], 0x2)
semop(r0, &(0x7f0000000000)=[{0x0, 0xfffa}, {0x0, 0x7f}], 0x2)
semop(r0, &(0x7f00000002c0)=[{0x0, 0x400}], 0x1)

04:37:39 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000008000b55f000000208600"})
r1 = socket$inet(0x2, 0x3, 0x3)
setsockopt$inet_mreqn(r1, 0x0, 0x27, 0x0, 0x0)

04:37:39 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x50, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xfffffffffffffffc}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}]}, 0x50}}, 0x0)

04:37:39 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
chroot(&(0x7f0000000280)='./file0\x00')
umount2(&(0x7f00000000c0)='./file0\x00', 0x2)
chroot(&(0x7f0000000f40)='./file0/../file0\x00')

04:37:39 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100000001}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000080), 0xfffffe58)
link(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0)
syz_mount_image$nfs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

04:37:39 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = epoll_create1(0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40345410, &(0x7f0000000000)={0x1})
ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x5420)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000140))
epoll_pwait(r2, &(0x7f0000000240)=[{}], 0x1, 0x101, 0x0, 0x0)
poll(&(0x7f0000000080)=[{r2}], 0x1, 0x100)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000001400)={0x1})

04:37:39 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x50, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xfffffffffffffffc}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}]}, 0x50}}, 0x0)