989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:44 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:44 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0))
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:30:44 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:44 executing program 1:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:44 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:30:45 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0), 0x0, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:30:45 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:45 executing program 1:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0))
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:30:45 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:45 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:45 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:46 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:46 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:47 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:30:47 executing program 5:
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:47 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:48 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:30:48 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0), 0x0, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:30:48 executing program 5:
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:48 executing program 1:
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:48 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:48 executing program 5:
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:48 executing program 1:
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:48 executing program 5:
syz_open_procfs(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:49 executing program 5:
syz_open_procfs(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:50 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:30:50 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:50 executing program 5:
syz_open_procfs(0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:51 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:30:51 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0), 0x0, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:30:51 executing program 1:
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:51 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, 0x0, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:51 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:51 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, 0x0, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:51 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, 0x0, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:51 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:51 executing program 1:
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  547.324367][  T921] kworker/dying (921) used greatest stack depth: 17912 bytes left
06:30:53 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:53 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:30:53 executing program 1:
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)

06:30:54 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:30:54 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:30:54 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:54 executing program 1:
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:30:54 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:30:54 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:54 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:54 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:30:54 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:55 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:55 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:55 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:57 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:30:57 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:30:57 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:57 executing program 1:
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:30:57 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:30:57 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:57 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:57 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:58 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:58 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:58 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:30:58 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:30:58 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:00 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:00 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:00 executing program 1:
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:00 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:01 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:01 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:01 executing program 1:
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:01 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:01 executing program 1:
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:01 executing program 1:
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:01 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:01 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:04 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:04 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:04 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:04 executing program 1:
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:04 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:04 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:04 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:04 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:04 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:04 executing program 1:
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:04 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:05 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:05 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:07 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:07 executing program 1:
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:07 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:07 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:07 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:07 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:07 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

[  562.684825][ T1229] ieee802154 phy0 wpan0: encryption failed: -22
[  562.691389][ T1229] ieee802154 phy1 wpan1: encryption failed: -22
06:31:07 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)

06:31:07 executing program 1:
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:07 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)

06:31:08 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:08 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:10 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)

06:31:10 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:10 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:10 executing program 1:
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:10 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:10 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:10 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:11 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:11 executing program 1:
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:11 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:11 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:11 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

06:31:11 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)

06:31:13 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:13 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:13 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:13 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:14 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:14 executing program 1:
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:14 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:14 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:14 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:14 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:14 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:15 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:16 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:16 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:16 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:16 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:17 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:17 executing program 1:
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:17 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:17 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:18 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:19 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:19 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:19 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:19 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:19 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:19 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:19 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:20 executing program 1:
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:20 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:20 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:21 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:22 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:22 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:22 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:22 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:23 executing program 1:
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:23 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:23 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:24 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100), &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:24 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:25 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:25 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:25 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:25 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:26 executing program 1:
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:26 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:27 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100), &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:27 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:28 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:28 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:28 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:28 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:29 executing program 1:
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:29 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:30 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:30 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:30 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100), &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:31 executing program 1:
timer_create(0x0, 0x0, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:31 executing program 1:
timer_create(0x0, 0x0, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:31 executing program 1:
timer_create(0x0, 0x0, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:31 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:31 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:31 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:31 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:31 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:31 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:31 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:31 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:33 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:33 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:33 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:33 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:34 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:34 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:34 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:34 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:34 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:34 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:34 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:35 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:35 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:35 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:35 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:35 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:37 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:37 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:37 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:38 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:38 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:38 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:38 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:38 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:38 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:38 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:38 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:38 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:40 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:40 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:40 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:40 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:41 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:41 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:41 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:41 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:41 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:41 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:41 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:42 executing program 4:
timer_create(0x0, 0x0, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:42 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:43 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:43 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:43 executing program 4:
timer_create(0x0, 0x0, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:43 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:43 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:43 executing program 4:
timer_create(0x0, 0x0, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:43 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:43 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:31:44 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:44 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)

06:31:44 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:45 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:46 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:46 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)

06:31:46 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:46 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:46 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)

06:31:46 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:47 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:47 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:47 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:47 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:48 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:48 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:49 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:49 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:49 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:49 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:49 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:49 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:50 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:51 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:51 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:51 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:51 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:52 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:52 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:52 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:52 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:52 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:52 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:54 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:55 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:55 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:55 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:55 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:55 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:56 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:56 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:56 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:56 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:56 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:57 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:58 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, 0x0, &(0x7f0000000400))

06:31:58 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:58 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, 0x0, &(0x7f0000000400))

06:31:58 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:31:58 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:58 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, 0x0, &(0x7f0000000400))

06:31:58 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:59 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:59 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:31:59 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:31:59 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:00 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, 0x0, &(0x7f0000000400))

06:32:00 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:00 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, 0x0, &(0x7f0000000400))

06:32:00 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, 0x0, &(0x7f0000000400))

06:32:02 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:02 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:32:02 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:02 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:02 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:02 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0))

06:32:02 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:32:02 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:02 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:02 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:02 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:02 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:02 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)

06:32:03 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)

06:32:03 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)

06:32:05 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:05 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:05 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:05 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:32:05 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:05 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:05 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:05 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:06 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:06 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:06 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:07 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:08 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:08 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:08 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:08 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:08 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:08 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:08 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:08 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  624.124909][ T1229] ieee802154 phy0 wpan0: encryption failed: -22
[  624.131341][ T1229] ieee802154 phy1 wpan1: encryption failed: -22
06:32:09 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:09 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:09 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:09 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:11 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:11 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:11 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:11 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:11 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:11 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:11 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:12 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:12 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:12 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:12 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:12 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:12 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:12 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:12 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:12 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:15 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:15 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:15 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:15 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:15 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:15 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:15 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:15 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:15 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:15 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:15 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:15 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)

06:32:18 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:18 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)

06:32:18 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:18 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:18 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:32:18 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)

06:32:18 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0)

06:32:18 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0)

06:32:18 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0)

06:32:18 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0)

06:32:18 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:18 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0)

06:32:21 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:21 executing program 1:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0)

06:32:21 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:21 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:32:21 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:21 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:32:21 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:21 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:21 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:22 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:22 executing program 1:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:22 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:24 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:24 executing program 1:
timer_create(0x0, 0x0, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:24 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:32:24 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:24 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:24 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:24 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:24 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:25 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:25 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:32:25 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:25 executing program 1:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:25 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:25 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:32:25 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:32:25 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:27 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:27 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:27 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:32:27 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:28 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:28 executing program 1:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:28 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:28 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:32:28 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:29 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:29 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:32:29 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:30 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:30 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:32:30 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:30 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:31 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:31 executing program 1:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:31 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:32:31 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:31 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:31 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:31 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:32:31 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:33 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:33 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:33 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:33 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:32:34 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:34 executing program 1:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:34 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:34 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:34 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:32:34 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:32:34 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)

06:32:34 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)

06:32:36 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:36 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)

06:32:36 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:36 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:32:37 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:37 executing program 1:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:37 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0)

06:32:37 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:32:37 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:37 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0)

06:32:37 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0)

06:32:37 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0)

06:32:39 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:39 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0)

06:32:39 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:39 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:32:40 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:40 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0)

06:32:40 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:40 executing program 1:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:40 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:40 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:32:41 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:41 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:42 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:42 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:42 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:42 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:43 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, 0x0, &(0x7f0000000400))

06:32:43 executing program 5:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:43 executing program 1:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:43 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:43 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:32:44 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, 0x0, &(0x7f0000000400))

06:32:44 executing program 5:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:44 executing program 4:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:44 executing program 5:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:44 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, 0x0, &(0x7f0000000400))

06:32:44 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0), 0x0, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:45 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:32:45 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:45 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:46 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:46 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:46 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:32:46 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:46 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:47 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:48 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:48 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:32:49 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:49 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:32:50 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:32:50 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:50 executing program 1:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:32:51 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x20})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0xfe6f)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[], 0x200600)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0})
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000100000000000005"])
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0x0, r2})

06:32:51 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x20})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0xfe6f)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[], 0x200600)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r1})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0})
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0x0, r2})

06:32:51 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:32:51 executing program 1:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
writev(r2, &(0x7f0000000480)=[{&(0x7f0000000440)="b7d1e0a5641df4bab3f4", 0xa}], 0x1)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:51 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
writev(r2, &(0x7f0000000480)=[{&(0x7f0000000440)="b7d1e0a5641df4bab3f4", 0xa}], 0x1)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0))
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:51 executing program 3:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
writev(r2, &(0x7f0000000480)=[{&(0x7f0000000440)="b7d1e0a5641df4bab3f4", 0xa}], 0x1)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0))
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:51 executing program 3:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

[  667.143701][ T3659] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  667.383683][ T3659] usb 4-1: Using ep0 maxpacket: 16
[  667.504401][ T3659] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  667.514491][ T3659] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  667.524447][ T3659] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  667.535165][ T3659] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  667.545265][ T3659] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  667.554560][ T3659] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  667.604726][ T3659] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[  667.835248][ T3659] scsi host1: usb-storage 4-1:1.0
06:32:52 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:52 executing program 1:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
writev(r2, &(0x7f0000000480)=[{&(0x7f0000000440)="b7d1e0a5641df4bab3f4", 0xa}], 0x1)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:53 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:32:53 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:53 executing program 1:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
writev(r2, &(0x7f0000000480)=[{&(0x7f0000000440)="b7d1e0a5641df4bab3f4", 0xa}], 0x1)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:53 executing program 1:
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.events\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000380), 0x12)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x2880008, r0})
clock_gettime(0x0, &(0x7f00000001c0))
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'sit0\x00', <r2=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x8000002, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
splice(r4, 0x0, r3, 0x0, 0x406f40a, 0x0)

[  668.846352][ T3692] scsi 1:0:0:0: Direct-Access     Sandisk  ImageMate SDDR09 0177 PQ: 0 ANSI: 0
[  668.868834][ T3692] sd 1:0:0:0: Attached scsi generic sg1 type 0
[  669.120064][    T5] usb 4-1: USB disconnect, device number 3
[  669.133861][ T9977] sddr09: could not read card info
[  669.139873][ T1009] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B)
[  669.147551][ T1009] sd 1:0:0:0: [sdb] 0-byte physical blocks
[  669.156633][ T1009] sd 1:0:0:0: [sdb] Write Protect is off
[  669.162670][ T1009] sd 1:0:0:0: [sdb] Asking for cache data failed
[  669.171673][ T1009] sd 1:0:0:0: [sdb] Assuming drive cache: write through
[  669.191256][ T1009] sd 1:0:0:0: [sdb] Attached SCSI removable disk
[  669.281578][ T3746] udevd[3746]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory
06:32:54 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

06:32:54 executing program 3:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:32:54 executing program 1:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
writev(r2, &(0x7f0000000480)=[{&(0x7f0000000440)="b7d1e0a5641df4bab3f4", 0xa}], 0x1)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

[  669.943600][ T3267] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  670.003725][ T3668] usb 5-1: new high-speed USB device number 6 using dummy_hcd
06:32:55 executing program 1:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
writev(r2, &(0x7f0000000480)=[{&(0x7f0000000440)="b7d1e0a5641df4bab3f4", 0xa}], 0x1)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

[  670.206675][ T3267] usb 4-1: Using ep0 maxpacket: 16
[  670.273734][ T3668] usb 5-1: Using ep0 maxpacket: 16
[  670.333986][ T3267] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  670.344441][ T3267] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  670.355039][ T3267] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  670.366781][ T3267] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  670.376934][ T3267] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  670.386525][ T3267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  670.423893][ T3668] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  670.434422][ T3668] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  670.445449][ T3267] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[  670.453053][ T3668] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  670.465011][ T3668] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  670.475131][ T3668] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  670.484608][ T3668] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
06:32:55 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0) (fail_nth: 1)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

[  670.534824][ T3668] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  670.635727][T10009] FAULT_INJECTION: forcing a failure.
[  670.635727][T10009] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  670.648955][T10009] CPU: 0 PID: 10009 Comm: syz-executor.1 Not tainted 5.16.0-rc5-syzkaller #0
[  670.657741][T10009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  670.667807][T10009] Call Trace:
[  670.671188][T10009]  <TASK>
[  670.674135][T10009]  dump_stack_lvl+0x201/0x2d8
[  670.678966][T10009]  ? show_regs_print_info+0x12/0x12
[  670.684187][T10009]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  670.690001][T10009]  ? __might_fault+0xb6/0x110
[  670.694745][T10009]  ? __lock_acquire+0x2b00/0x2b00
[  670.699808][T10009]  should_fail+0x384/0x4b0
[  670.704283][T10009]  _copy_from_user+0x2d/0x170
[  670.709130][T10009]  iovec_from_user+0x13f/0x390
[  670.713963][T10009]  ? rcu_lock_release+0x9/0x20
[  670.718856][T10009]  __import_iovec+0xc6/0x530
[  670.723592][T10009]  ? iovec_from_user+0x390/0x390
[  670.728533][T10009]  import_iovec+0xe6/0x120
[  670.733056][T10009]  do_preadv+0x1d6/0x350
[  670.737384][T10009]  ? do_writev+0x470/0x470
[  670.741788][T10009]  ? __context_tracking_exit+0x7a/0xd0
[  670.747284][T10009]  ? lockdep_hardirqs_on_prepare+0x412/0x780
[  670.753261][T10009]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  670.759283][T10009]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  670.765260][T10009]  ? lockdep_hardirqs_on+0x95/0x140
[  670.770456][T10009]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  670.776433][T10009]  do_syscall_64+0x44/0xd0
[  670.780914][T10009]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  670.786859][T10009] RIP: 0033:0x7f7766d20e99
[  670.791281][T10009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  670.810888][T10009] RSP: 002b:00007f7765696168 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  670.819319][T10009] RAX: ffffffffffffffda RBX: 00007f7766e33f60 RCX: 00007f7766d20e99
[  670.827283][T10009] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004
[  670.835247][T10009] RBP: 00007f77656961d0 R08: 0000000000000000 R09: 0000000000000000
[  670.843206][T10009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  670.851166][T10009] R13: 00007ffd6392fe0f R14: 00007f7765696300 R15: 0000000000022000
[  670.859166][T10009]  </TASK>
[  670.874724][ T3267] scsi host1: usb-storage 4-1:1.0
06:32:55 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0) (fail_nth: 2)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

[  670.896887][ T3668] scsi host2: usb-storage 5-1:1.0
06:32:55 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:56 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

[  671.174310][T10017] FAULT_INJECTION: forcing a failure.
[  671.174310][T10017] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  671.187741][T10017] CPU: 1 PID: 10017 Comm: syz-executor.1 Not tainted 5.16.0-rc5-syzkaller #0
[  671.196535][T10017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  671.206606][T10017] Call Trace:
[  671.209905][T10017]  <TASK>
[  671.212856][T10017]  dump_stack_lvl+0x201/0x2d8
[  671.217574][T10017]  ? show_regs_print_info+0x12/0x12
[  671.222808][T10017]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  671.228658][T10017]  ? __might_fault+0xb6/0x110
[  671.233354][T10017]  ? __lock_acquire+0x2b00/0x2b00
[  671.238413][T10017]  should_fail+0x384/0x4b0
[  671.242862][T10017]  _copy_from_user+0x2d/0x170
[  671.247561][T10017]  iovec_from_user+0x13f/0x390
[  671.252358][T10017]  ? rcu_lock_release+0x9/0x20
[  671.257153][T10017]  __import_iovec+0xc6/0x530
[  671.261779][T10017]  ? iovec_from_user+0x390/0x390
[  671.266757][T10017]  import_iovec+0xe6/0x120
[  671.271198][T10017]  do_preadv+0x1d6/0x350
[  671.275462][T10017]  ? do_writev+0x470/0x470
[  671.279891][T10017]  ? __context_tracking_exit+0x7a/0xd0
[  671.285355][T10017]  ? lockdep_hardirqs_on_prepare+0x412/0x780
[  671.291329][T10017]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  671.297307][T10017]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  671.303350][T10017]  ? lockdep_hardirqs_on+0x95/0x140
[  671.308538][T10017]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  671.314517][T10017]  do_syscall_64+0x44/0xd0
[  671.318956][T10017]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  671.324914][T10017] RIP: 0033:0x7f7766d20e99
[  671.329324][T10017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  671.348917][T10017] RSP: 002b:00007f7765696168 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  671.357325][T10017] RAX: ffffffffffffffda RBX: 00007f7766e33f60 RCX: 00007f7766d20e99
[  671.365284][T10017] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004
06:32:56 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:32:56 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  671.373259][T10017] RBP: 00007f77656961d0 R08: 0000000000000000 R09: 0000000000000000
[  671.381218][T10017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  671.389174][T10017] R13: 00007ffd6392fe0f R14: 00007f7765696300 R15: 0000000000022000
[  671.397161][T10017]  </TASK>
06:32:56 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:56 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0) (fail_nth: 3)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

[  671.825589][T10029] FAULT_INJECTION: forcing a failure.
[  671.825589][T10029] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  671.840345][T10029] CPU: 0 PID: 10029 Comm: syz-executor.1 Not tainted 5.16.0-rc5-syzkaller #0
[  671.849145][T10029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  671.859331][T10029] Call Trace:
[  671.862628][T10029]  <TASK>
[  671.865576][T10029]  dump_stack_lvl+0x201/0x2d8
[  671.870324][T10029]  ? show_regs_print_info+0x12/0x12
[  671.875525][T10029]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  671.881273][T10029]  ? __might_fault+0xb6/0x110
[  671.885965][T10029]  ? __lock_acquire+0x2b00/0x2b00
[  671.891027][T10029]  should_fail+0x384/0x4b0
[  671.895460][T10029]  _copy_from_user+0x2d/0x170
[  671.900146][T10029]  iovec_from_user+0x13f/0x390
[  671.904915][T10029]  ? rcu_lock_release+0x9/0x20
[  671.909692][T10029]  __import_iovec+0xc6/0x530
[  671.914437][T10029]  ? iovec_from_user+0x390/0x390
[  671.919369][T10029]  import_iovec+0xe6/0x120
[  671.923781][T10029]  do_preadv+0x1d6/0x350
[  671.928016][T10029]  ? do_writev+0x470/0x470
[  671.932422][T10029]  ? __context_tracking_exit+0x7a/0xd0
[  671.937878][T10029]  ? lockdep_hardirqs_on_prepare+0x412/0x780
[  671.943866][T10029]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  671.949946][T10029]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  671.955924][T10029]  ? lockdep_hardirqs_on+0x95/0x140
[  671.961117][T10029]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  671.967199][T10029]  do_syscall_64+0x44/0xd0
[  671.971628][T10029]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  671.977521][T10029] RIP: 0033:0x7f7766d20e99
[  671.981926][T10029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  672.001533][T10029] RSP: 002b:00007f7765696168 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  672.009945][T10029] RAX: ffffffffffffffda RBX: 00007f7766e33f60 RCX: 00007f7766d20e99
[  672.017920][T10029] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004
[  672.025887][T10029] RBP: 00007f77656961d0 R08: 0000000000000000 R09: 0000000000000000
[  672.033964][T10029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  672.041936][T10029] R13: 00007ffd6392fe0f R14: 00007f7765696300 R15: 0000000000022000
[  672.049926][T10029]  </TASK>
[  672.062914][   T54] scsi 1:0:0:0: Direct-Access     Sandisk  ImageMate SDDR09 0177 PQ: 0 ANSI: 0
[  672.076269][ T1088] scsi 2:0:0:0: Direct-Access     Sandisk  ImageMate SDDR09 0177 PQ: 0 ANSI: 0
[  672.096011][ T1088] sd 2:0:0:0: Attached scsi generic sg1 type 0
[  672.109472][   T54] sd 1:0:0:0: Attached scsi generic sg2 type 0
[  672.326950][ T3671] usb 5-1: USB disconnect, device number 6
[  672.333702][T10012] sddr09: could not read card info
[  672.341689][ T4945] sd 2:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B)
[  672.346488][ T3659] usb 4-1: USB disconnect, device number 4
[  672.364300][T10010] sddr09: could not read card info
[  672.370899][ T4945] sd 2:0:0:0: [sdb] 0-byte physical blocks
[  672.380385][ T4945] sd 2:0:0:0: [sdb] Write Protect is off
[  672.391935][ T4945] sd 2:0:0:0: [sdb] Asking for cache data failed
[  672.399113][ T4945] sd 2:0:0:0: [sdb] Assuming drive cache: write through
[  672.408630][ T1009] sd 1:0:0:0: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK
[  672.420390][ T1009] sd 1:0:0:0: [sdc] Sense not available.
[  672.426501][ T1009] sd 1:0:0:0: [sdc] 0 512-byte logical blocks: (0 B/0 B)
[  672.433858][ T1009] sd 1:0:0:0: [sdc] 0-byte physical blocks
[  672.440173][ T1009] sd 1:0:0:0: [sdc] Write Protect is off
[  672.447591][ T1009] sd 1:0:0:0: [sdc] Asking for cache data failed
[  672.454542][ T1009] sd 1:0:0:0: [sdc] Assuming drive cache: write through
[  672.464635][ T4945] sd 2:0:0:0: [sdb] Attached SCSI removable disk
[  672.478394][ T1009] sd 1:0:0:0: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK
[  672.490169][ T1009] sd 1:0:0:0: [sdc] Sense not available.
[  672.499393][ T1009] sd 1:0:0:0: [sdc] Attached SCSI removable disk
[  672.630012][ T5244] udevd[5244]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory
[  672.656569][ T3746] udevd[3746]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory
06:32:57 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

06:32:57 executing program 3:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:32:57 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0) (fail_nth: 4)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

[  673.016002][T10039] FAULT_INJECTION: forcing a failure.
[  673.016002][T10039] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  673.029837][T10039] CPU: 1 PID: 10039 Comm: syz-executor.1 Not tainted 5.16.0-rc5-syzkaller #0
[  673.038721][T10039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  673.048788][T10039] Call Trace:
[  673.052080][T10039]  <TASK>
[  673.055021][T10039]  dump_stack_lvl+0x201/0x2d8
[  673.059815][T10039]  ? show_regs_print_info+0x12/0x12
[  673.065035][T10039]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  673.070792][T10039]  ? __might_fault+0xb6/0x110
[  673.075488][T10039]  ? __lock_acquire+0x2b00/0x2b00
[  673.080533][T10039]  should_fail+0x384/0x4b0
[  673.084951][T10039]  _copy_from_user+0x2d/0x170
[  673.089896][T10039]  iovec_from_user+0x13f/0x390
[  673.094653][T10039]  ? rcu_lock_release+0x9/0x20
[  673.099524][T10039]  __import_iovec+0xc6/0x530
[  673.104127][T10039]  ? iovec_from_user+0x390/0x390
[  673.109084][T10039]  import_iovec+0xe6/0x120
[  673.113504][T10039]  do_preadv+0x1d6/0x350
[  673.117844][T10039]  ? do_writev+0x470/0x470
[  673.122250][T10039]  ? __context_tracking_exit+0x7a/0xd0
[  673.127729][T10039]  ? lockdep_hardirqs_on_prepare+0x412/0x780
[  673.133727][T10039]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  673.139725][T10039]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  673.145701][T10039]  ? lockdep_hardirqs_on+0x95/0x140
[  673.150905][T10039]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  673.156889][T10039]  do_syscall_64+0x44/0xd0
[  673.161335][T10039]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  673.163859][ T3659] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  673.167311][T10039] RIP: 0033:0x7f7766d20e99
[  673.167337][T10039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  673.167353][T10039] RSP: 002b:00007f7765696168 EFLAGS: 00000246
[  673.183598][ T3671] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  673.198894][T10039]  ORIG_RAX: 0000000000000127
[  673.198911][T10039] RAX: ffffffffffffffda RBX: 00007f7766e33f60 RCX: 00007f7766d20e99
[  673.198925][T10039] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004
[  673.198936][T10039] RBP: 00007f77656961d0 R08: 0000000000000000 R09: 0000000000000000
[  673.198946][T10039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  673.198956][T10039] R13: 00007ffd6392fe0f R14: 00007f7765696300 R15: 0000000000022000
[  673.198983][T10039]  </TASK>
[  673.493734][ T3671] usb 4-1: Using ep0 maxpacket: 16
[  673.498964][ T3659] usb 5-1: Using ep0 maxpacket: 16
[  673.623801][ T3659] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  673.633778][ T3671] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  673.643741][ T3659] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  673.653402][ T3659] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  673.663625][ T3671] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  673.673320][ T3671] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  673.689449][ T3659] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  673.699467][ T3671] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  673.715127][ T3659] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  673.728982][ T3671] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  673.740130][ T3659] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  673.751735][ T3671] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  673.814442][ T3659] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  673.826528][ T3671] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[  674.046592][ T3671] scsi host2: usb-storage 4-1:1.0
[  674.051811][ T3659] scsi host1: usb-storage 5-1:1.0
06:32:59 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:32:59 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:32:59 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:59 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:59 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:32:59 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:32:59 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:33:00 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

[  675.085097][ T4945] scsi 1:0:0:0: Direct-Access     Sandisk  ImageMate SDDR09 0177 PQ: 0 ANSI: 0
[  675.103692][ T3692] scsi 2:0:0:0: Direct-Access     Sandisk  ImageMate SDDR09 0177 PQ: 0 ANSI: 0
[  675.140439][ T4945] sd 1:0:0:0: Attached scsi generic sg1 type 0
06:33:00 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

[  675.190142][ T3692] scsi 2:0:0:0: Attached scsi generic sg2 type 0
[  675.376144][  T136] usb 5-1: USB disconnect, device number 7
[  675.384725][T10048] sddr09: could not read card info
[  675.394157][   T54] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B)
[  675.401261][   T54] sd 1:0:0:0: [sdb] 0-byte physical blocks
[  675.409269][   T54] sd 1:0:0:0: [sdb] Write Protect is off
[  675.417479][   T54] sd 1:0:0:0: [sdb] Asking for cache data failed
[  675.424476][   T54] sd 1:0:0:0: [sdb] Assuming drive cache: write through
[  675.436888][   T54] sd 1:0:0:0: [sdb] Attached SCSI removable disk
[  675.461256][ T3267] usb 4-1: USB disconnect, device number 5
[  675.467403][T10047] sddr09: could not read card info
[  675.528082][ T1009] sd 2:0:0:0: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK
[  675.546915][ T1009] sd 2:0:0:0: [sdc] Sense not available.
[  675.555291][ T1009] sd 2:0:0:0: [sdc] 0 512-byte logical blocks: (0 B/0 B)
[  675.562527][ T1009] sd 2:0:0:0: [sdc] 0-byte physical blocks
[  675.570965][ T1009] sd 2:0:0:0: [sdc] Write Protect is off
[  675.588020][ T1009] sd 2:0:0:0: [sdc] Asking for cache data failed
[  675.595108][ T1009] sd 2:0:0:0: [sdc] Assuming drive cache: write through
[  675.615359][ T1009] sd 2:0:0:0: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK
[  675.639988][ T1009] sd 2:0:0:0: [sdc] Sense not available.
[  675.659066][ T1009] sd 2:0:0:0: [sdc] Attached SCSI removable disk
[  675.872542][ T3746] udevd[3746]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory
06:33:00 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

06:33:00 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0) (fail_nth: 1)

06:33:00 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

[  675.919138][T10031] udevd[10031]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory
[  676.020670][T10078] FAULT_INJECTION: forcing a failure.
[  676.020670][T10078] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  676.035558][T10078] CPU: 0 PID: 10078 Comm: syz-executor.3 Not tainted 5.16.0-rc5-syzkaller #0
[  676.044370][T10078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  676.054448][T10078] Call Trace:
[  676.057739][T10078]  <TASK>
[  676.060687][T10078]  dump_stack_lvl+0x201/0x2d8
[  676.065403][T10078]  ? show_regs_print_info+0x12/0x12
[  676.070629][T10078]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  676.076563][T10078]  ? __might_fault+0xb6/0x110
[  676.081376][T10078]  ? __lock_acquire+0x2b00/0x2b00
[  676.086438][T10078]  should_fail+0x384/0x4b0
[  676.090887][T10078]  _copy_from_user+0x2d/0x170
[  676.095595][T10078]  iovec_from_user+0x13f/0x390
[  676.100391][T10078]  ? rcu_lock_release+0x9/0x20
[  676.105183][T10078]  __import_iovec+0xc6/0x530
[  676.109811][T10078]  ? iovec_from_user+0x390/0x390
[  676.114792][T10078]  import_iovec+0xe6/0x120
[  676.119241][T10078]  do_preadv+0x1d6/0x350
[  676.123528][T10078]  ? do_writev+0x470/0x470
[  676.127960][T10078]  ? __context_tracking_exit+0x7a/0xd0
[  676.133430][T10078]  ? lockdep_hardirqs_on_prepare+0x412/0x780
[  676.139431][T10078]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  676.145430][T10078]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  676.151404][T10078]  ? lockdep_hardirqs_on+0x95/0x140
[  676.156690][T10078]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  676.162656][T10078]  do_syscall_64+0x44/0xd0
[  676.167059][T10078]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  676.172934][T10078] RIP: 0033:0x7fc48b6cee99
[  676.177456][T10078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  676.197220][T10078] RSP: 002b:00007fc48a044168 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  676.205628][T10078] RAX: ffffffffffffffda RBX: 00007fc48b7e1f60 RCX: 00007fc48b6cee99
[  676.213583][T10078] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003
[  676.221537][T10078] RBP: 00007fc48a0441d0 R08: 0000000000000000 R09: 0000000000000000
[  676.229497][T10078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  676.237480][T10078] R13: 00007ffcd8b7ec0f R14: 00007fc48a044300 R15: 0000000000022000
[  676.245450][T10078]  </TASK>
[  676.393747][ T3671] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  676.633550][ T3671] usb 5-1: Using ep0 maxpacket: 16
[  676.773902][ T3671] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  676.784013][ T3671] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  676.794005][ T3671] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  676.803894][ T3671] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  676.813832][ T3671] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  676.822943][ T3671] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  676.884811][ T3671] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  677.104676][ T3671] scsi host1: usb-storage 5-1:1.0
06:33:02 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:02 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:33:02 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:33:02 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0) (fail_nth: 2)

06:33:02 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

[  677.542194][T10087] FAULT_INJECTION: forcing a failure.
[  677.542194][T10087] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  677.558174][T10087] CPU: 1 PID: 10087 Comm: syz-executor.3 Not tainted 5.16.0-rc5-syzkaller #0
[  677.567004][T10087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  677.577166][T10087] Call Trace:
[  677.580452][T10087]  <TASK>
[  677.583378][T10087]  dump_stack_lvl+0x201/0x2d8
[  677.588067][T10087]  ? show_regs_print_info+0x12/0x12
[  677.593263][T10087]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  677.599001][T10087]  ? __might_fault+0xb6/0x110
[  677.603723][T10087]  ? __lock_acquire+0x2b00/0x2b00
[  677.608765][T10087]  should_fail+0x384/0x4b0
[  677.613180][T10087]  _copy_from_user+0x2d/0x170
[  677.617942][T10087]  iovec_from_user+0x13f/0x390
[  677.622716][T10087]  ? rcu_lock_release+0x9/0x20
[  677.627470][T10087]  __import_iovec+0xc6/0x530
[  677.632113][T10087]  ? iovec_from_user+0x390/0x390
[  677.637067][T10087]  import_iovec+0xe6/0x120
[  677.641510][T10087]  do_preadv+0x1d6/0x350
[  677.645764][T10087]  ? do_writev+0x470/0x470
[  677.650233][T10087]  ? __context_tracking_exit+0x7a/0xd0
[  677.655707][T10087]  ? lockdep_hardirqs_on_prepare+0x412/0x780
[  677.661707][T10087]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  677.667696][T10087]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  677.673699][T10087]  ? lockdep_hardirqs_on+0x95/0x140
[  677.678911][T10087]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  677.684992][T10087]  do_syscall_64+0x44/0xd0
[  677.689433][T10087]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  677.695414][T10087] RIP: 0033:0x7fc48b6cee99
[  677.699839][T10087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  677.719539][T10087] RSP: 002b:00007fc48a044168 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  677.727976][T10087] RAX: ffffffffffffffda RBX: 00007fc48b7e1f60 RCX: 00007fc48b6cee99
06:33:02 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0) (fail_nth: 3)

[  677.735967][T10087] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003
[  677.743953][T10087] RBP: 00007fc48a0441d0 R08: 0000000000000000 R09: 0000000000000000
[  677.751939][T10087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  677.759927][T10087] R13: 00007ffcd8b7ec0f R14: 00007fc48a044300 R15: 0000000000022000
[  677.769438][T10087]  </TASK>
06:33:02 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:33:03 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

[  678.125479][ T1009] scsi 1:0:0:0: Direct-Access     Sandisk  ImageMate SDDR09 0177 PQ: 0 ANSI: 0
[  678.141376][ T1009] sd 1:0:0:0: Attached scsi generic sg1 type 0
06:33:03 executing program 0:
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

[  678.393999][ T3669] usb 5-1: USB disconnect, device number 8
[  678.403793][T10081] sddr09: could not read card info
[  678.409106][   T54] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B)
[  678.420174][   T54] sd 1:0:0:0: [sdb] 0-byte physical blocks
[  678.430580][   T54] sd 1:0:0:0: [sdb] Write Protect is off
[  678.450351][   T54] sd 1:0:0:0: [sdb] Asking for cache data failed
[  678.470507][   T54] sd 1:0:0:0: [sdb] Assuming drive cache: write through
[  678.501930][   T54] sd 1:0:0:0: [sdb] Attached SCSI removable disk
[  678.658512][ T5244] udevd[5244]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory
[  678.663001][T10095] FAULT_INJECTION: forcing a failure.
[  678.663001][T10095] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  678.682351][T10095] CPU: 1 PID: 10095 Comm: syz-executor.3 Not tainted 5.16.0-rc5-syzkaller #0
[  678.691210][T10095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  678.701270][T10095] Call Trace:
[  678.704544][T10095]  <TASK>
[  678.707467][T10095]  dump_stack_lvl+0x201/0x2d8
[  678.712143][T10095]  ? show_regs_print_info+0x12/0x12
[  678.717336][T10095]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  678.723091][T10095]  should_fail+0x384/0x4b0
[  678.727533][T10095]  prepare_alloc_pages+0x1db/0x5a0
[  678.732728][T10095]  __alloc_pages+0x161/0x580
[  678.737311][T10095]  ? __rmqueue_pcplist+0x2090/0x2090
[  678.742587][T10095]  ? rcu_lock_acquire+0x30/0x30
[  678.747498][T10095]  ? __lock_acquire+0x2b00/0x2b00
[  678.752527][T10095]  ? alloc_pages+0x44a/0x560
[  678.757161][T10095]  __get_free_pages+0x8/0x30
[  678.761757][T10095]  __tlb_remove_page_size+0x1f5/0x3d0
[  678.767135][T10095]  zap_pte_range+0xb0e/0x1ba0
[  678.771851][T10095]  ? restore_exclusive_pte+0x4b0/0x4b0
[  678.777321][T10095]  ? __might_sleep+0xe0/0xe0
[  678.781980][T10095]  ? __tlb_remove_page_size+0x19b/0x3d0
[  678.787530][T10095]  ? zap_huge_pmd+0xa14/0xb50
[  678.792293][T10095]  unmap_page_range+0x745/0xa20
[  678.797158][T10095]  unmap_vmas+0x202/0x390
[  678.801512][T10095]  ? unmap_page_range+0xa20/0xa20
[  678.806552][T10095]  ? tlb_gather_mmu_fullmm+0x154/0x200
[  678.812020][T10095]  exit_mmap+0x3c6/0x6f0
[  678.816284][T10095]  ? vm_brk+0x20/0x20
[  678.820296][T10095]  ? __khugepaged_exit+0x2ea/0x360
[  678.825422][T10095]  __mmput+0x111/0x3a0
[  678.829569][T10095]  exit_mm+0x211/0x2f0
[  678.833702][T10095]  ? coredump_task_exit+0x580/0x580
[  678.838914][T10095]  ? tty_audit_exit+0x14f/0x1f0
[  678.843826][T10095]  do_exit+0x688/0x24f0
[  678.848008][T10095]  ? mm_update_next_owner+0x6d0/0x6d0
[  678.853393][T10095]  ? lockdep_hardirqs_on_prepare+0x412/0x780
[  678.859401][T10095]  ? print_irqtrace_events+0x220/0x220
[  678.864877][T10095]  ? _raw_spin_lock_irq+0xdb/0x110
[  678.870001][T10095]  do_group_exit+0x168/0x2d0
[  678.874686][T10095]  ? lockdep_hardirqs_on+0x95/0x140
[  678.879898][T10095]  get_signal+0x1740/0x2120
[  678.884522][T10095]  ? task_work_add+0x166/0x1b0
[  678.889397][T10095]  ? ptrace_notify+0x340/0x340
[  678.894173][T10095]  ? fput_many+0x159/0x1a0
[  678.898607][T10095]  ? do_preadv+0x2a8/0x350
[  678.903039][T10095]  arch_do_signal_or_restart+0x9c/0x730
[  678.908701][T10095]  ? get_sigframe_size+0x10/0x10
[  678.913647][T10095]  ? lockdep_hardirqs_on_prepare+0x412/0x780
[  678.919654][T10095]  ? exit_to_user_mode_prepare+0x12e/0x220
[  678.925543][T10095]  exit_to_user_mode_prepare+0x191/0x220
[  678.931195][T10095]  ? trace_irq_disable_rcuidle+0x11/0x170
[  678.937012][T10095]  syscall_exit_to_user_mode+0x2e/0x70
[  678.942483][T10095]  do_syscall_64+0x53/0xd0
[  678.946912][T10095]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  678.952805][T10095] RIP: 0033:0x7fc48b6cee99
[  678.957226][T10095] Code: Unable to access opcode bytes at RIP 0x7fc48b6cee6f.
[  678.964593][T10095] RSP: 002b:00007fc48a044168 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  678.973015][T10095] RAX: fffffffffffffe00 RBX: 00007fc48b7e1f60 RCX: 00007fc48b6cee99
[  678.980983][T10095] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003
[  678.989011][T10095] RBP: 00007fc48a0441d0 R08: 0000000000000000 R09: 0000000000000000
[  678.997083][T10095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
06:33:03 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:33:04 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:33:04 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0x3c0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

[  679.005067][T10095] R13: 00007ffcd8b7ec0f R14: 00007fc48a044300 R15: 0000000000022000
[  679.013061][T10095]  </TASK>
[  679.323706][   T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  679.583617][   T25] usb 5-1: Using ep0 maxpacket: 16
[  679.725394][   T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  679.735107][   T25] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  679.745065][   T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  679.755055][   T25] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  679.765026][   T25] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  679.774423][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  679.836263][   T25] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  680.057648][   T25] scsi host1: usb-storage 5-1:1.0
06:33:05 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:05 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:33:05 executing program 0:
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:33:05 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:33:05 executing program 0:
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:33:06 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

[  681.085936][ T1088] scsi 1:0:0:0: Direct-Access     Sandisk  ImageMate SDDR09 0177 PQ: 0 ANSI: 0
[  681.120617][ T1088] sd 1:0:0:0: Attached scsi generic sg1 type 0
06:33:06 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

[  681.358595][ T3668] usb 5-1: USB disconnect, device number 9
[  681.373765][T10120] sddr09: could not read card info
[  681.379324][   T44] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B)
[  681.387319][   T44] sd 1:0:0:0: [sdb] 0-byte physical blocks
[  681.393843][   T44] sd 1:0:0:0: [sdb] Write Protect is off
[  681.399900][   T44] sd 1:0:0:0: [sdb] Asking for cache data failed
[  681.406720][   T44] sd 1:0:0:0: [sdb] Assuming drive cache: write through
06:33:06 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

[  681.433897][   T44] sd 1:0:0:0: [sdb] Attached SCSI removable disk
06:33:06 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

[  681.652666][ T5244] udevd[5244]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory
06:33:06 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

06:33:06 executing program 0:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:33:07 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0x20000400}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

[  682.174184][ T3671] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  682.413852][ T3671] usb 5-1: Using ep0 maxpacket: 16
[  682.533703][ T3671] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  682.543369][ T3671] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  682.553119][ T3671] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  682.568132][ T3671] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  682.578069][ T3671] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  682.593320][ T3671] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  682.644278][ T3671] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  682.864749][ T3671] scsi host1: usb-storage 5-1:1.0
[  683.068451][ T3671] usb 5-1: USB disconnect, device number 10
06:33:08 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:08 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0x3c0}], 0x1, 0x0, 0x0)

06:33:08 executing program 0:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:33:08 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:33:08 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

06:33:08 executing program 0:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

[  683.913628][ T3659] usb 5-1: new high-speed USB device number 11 using dummy_hcd
06:33:09 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

[  684.163704][ T3659] usb 5-1: Using ep0 maxpacket: 16
[  684.283895][ T3659] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  684.300649][ T3659] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  684.311130][ T3659] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  684.321747][ T3659] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  684.341084][ T3659] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  684.350804][ T3659] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  684.404725][ T3659] ums-sddr09 5-1:1.0: USB Mass Storage device detected
06:33:09 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0x20000400}], 0x1, 0x0, 0x0)

06:33:09 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

[  684.626697][ T3659] scsi host1: usb-storage 5-1:1.0
06:33:09 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

[  684.821629][ T3671] usb 5-1: USB disconnect, device number 11
06:33:10 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0x7ffff000}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:33:10 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

[  685.565662][ T1229] ieee802154 phy0 wpan0: encryption failed: -22
[  685.572131][ T1229] ieee802154 phy1 wpan1: encryption failed: -22
06:33:11 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:11 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

06:33:11 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:33:11 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0x7ffff000}], 0x1, 0x0, 0x0)

06:33:11 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:33:11 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:33:11 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

[  686.943712][ T3668] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  687.198558][ T3668] usb 5-1: Using ep0 maxpacket: 16
[  687.324253][ T3668] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  687.334298][ T3668] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  687.344188][ T3668] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  687.354141][ T3668] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  687.364154][ T3668] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  687.373293][ T3668] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  687.424769][ T3668] ums-sddr09 5-1:1.0: USB Mass Storage device detected
06:33:12 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:33:12 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xffffffffffffffff}], 0x1, 0x0, 0x0)

06:33:12 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x2, 0x0, 0x0)

[  687.634550][ T3668] scsi host1: usb-storage 5-1:1.0
[  687.841842][ T3668] usb 5-1: USB disconnect, device number 12
06:33:13 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xffffffffffffffff}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:33:13 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

[  688.653685][ T3659] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  688.923615][ T3659] usb 5-1: Using ep0 maxpacket: 16
[  689.043788][ T3659] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  689.053669][ T3659] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  689.063408][ T3659] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  689.073283][ T3659] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  689.083232][ T3659] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  689.092502][ T3659] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  689.155186][ T3659] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  689.375767][ T3659] scsi host1: usb-storage 5-1:1.0
[  689.582063][ T3671] usb 5-1: USB disconnect, device number 13
06:33:14 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:14 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x3, 0x0, 0x0)

06:33:14 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:14 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:14 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:14 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:33:15 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

[  690.443633][ T3671] usb 5-1: new high-speed USB device number 14 using dummy_hcd
06:33:15 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:33:15 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x4, 0x0, 0x0)

[  690.732057][ T3671] usb 5-1: Using ep0 maxpacket: 16
06:33:15 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  690.874143][ T3671] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  690.887278][ T3671] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  690.897733][ T3671] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  690.907978][ T3671] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  690.929578][ T3671] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  690.961077][ T3671] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  691.040788][ T3671] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  691.245810][ T3671] scsi host1: usb-storage 5-1:1.0
06:33:16 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x2, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

[  691.449939][ T3671] usb 5-1: USB disconnect, device number 14
06:33:16 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:33:16 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:16 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x5, 0x0, 0x0)

06:33:16 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

[  692.323737][    T5] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  692.563566][    T5] usb 5-1: Using ep0 maxpacket: 16
[  692.683711][    T5] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  692.698457][    T5] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  692.708442][    T5] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  692.718462][    T5] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  692.729078][    T5] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  692.738329][    T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
06:33:17 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x6, 0x0, 0x0)

[  692.784678][    T5] ums-sddr09 5-1:1.0: USB Mass Storage device detected
06:33:17 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  692.994871][    T5] scsi host1: usb-storage 5-1:1.0
06:33:18 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

[  693.202248][  T136] usb 5-1: USB disconnect, device number 15
06:33:18 executing program 4:
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)

06:33:18 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:19 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x7, 0x0, 0x0)

06:33:19 executing program 4:
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)

06:33:19 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x3, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:33:19 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

06:33:19 executing program 4:
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)

06:33:19 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:20 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x8, 0x0, 0x0)

06:33:20 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:33:20 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:21 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:33:21 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:33:21 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x300, 0x0, 0x0)

06:33:21 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:33:21 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:22 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x4, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:33:22 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, 0x0, &(0x7f0000000400))

06:33:22 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x989680, 0x0, 0x0)

06:33:22 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:33:22 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:22 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:33:23 executing program 2:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)

[  698.173706][ T3659] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  698.373592][ T3659] usb 5-1: device descriptor read/64, error 18
06:33:23 executing program 2:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

[  698.643613][ T3659] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  698.833875][ T3659] usb 5-1: device descriptor read/64, error 18
[  698.953569][T10325] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  698.964042][ T3659] usb usb5-port1: attempt power cycle
06:33:24 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:33:24 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:24 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x2, 0x0)

[  699.203578][T10325] usb 3-1: Using ep0 maxpacket: 16
[  699.323909][T10325] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  699.333938][T10325] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  699.344293][T10325] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  699.354680][T10325] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  699.364802][T10325] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  699.374268][ T3659] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  699.382593][T10325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  699.424528][T10325] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[  699.553935][ T3659] usb 5-1: device descriptor read/8, error -61
[  699.646212][T10325] scsi host1: usb-storage 3-1:1.0
[  699.823605][ T3659] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  699.856382][ T3267] usb 3-1: USB disconnect, device number 8
06:33:24 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x3, 0x0)

[  699.993766][ T3659] usb 5-1: device descriptor read/8, error -61
[  700.113881][ T3659] usb usb5-port1: unable to enumerate USB device
06:33:25 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x5, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:33:25 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:25 executing program 2:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:33:25 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

[  701.033634][ T3267] usb 3-1: new high-speed USB device number 9 using dummy_hcd
06:33:26 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x4, 0x0)

[  701.283718][ T3267] usb 3-1: Using ep0 maxpacket: 16
[  701.404125][  T136] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  701.423815][ T3267] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  701.434731][ T3267] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  701.445466][ T3267] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  701.455867][ T3267] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  701.466246][ T3267] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  701.476119][ T3267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.544508][ T3267] ums-sddr09 3-1:1.0: USB Mass Storage device detected
06:33:26 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  701.593621][  T136] usb 5-1: device descriptor read/64, error 18
[  701.767069][ T3267] scsi host1: usb-storage 3-1:1.0
[  701.883827][  T136] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  701.977383][ T3668] usb 3-1: USB disconnect, device number 9
06:33:27 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x5, 0x0)

[  702.104229][  T136] usb 5-1: device descriptor read/64, error 18
[  702.234129][  T136] usb usb5-port1: attempt power cycle
06:33:27 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:33:27 executing program 2:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:33:27 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  702.663616][  T136] usb 5-1: new high-speed USB device number 22 using dummy_hcd
06:33:27 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  702.793825][T10325] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  702.883727][  T136] usb 5-1: device descriptor read/8, error -61
06:33:27 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  703.043535][T10325] usb 3-1: Using ep0 maxpacket: 16
[  703.163774][T10325] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  703.175559][T10325] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  703.183619][  T136] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  703.196313][T10325] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  703.206272][T10325] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  703.216918][T10325] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  703.226537][T10325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  703.275029][T10325] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[  703.403883][  T136] usb 5-1: device descriptor read/8, error -61
[  703.494464][T10325] scsi host1: usb-storage 3-1:1.0
[  703.540186][  T136] usb usb5-port1: unable to enumerate USB device
[  703.700333][T10325] usb 3-1: USB disconnect, device number 10
06:33:28 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x6, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:33:28 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x6, 0x0)

06:33:28 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:28 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:33:28 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:29 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:29 executing program 2:
syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0)

[  704.423571][  T136] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  704.553617][ T3668] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  704.633604][  T136] usb 5-1: device descriptor read/64, error 18
[  704.813638][ T3668] usb 3-1: Using ep0 maxpacket: 16
[  704.913763][  T136] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  704.953800][ T3668] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  704.964195][ T3668] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  704.974436][ T3668] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  704.984517][ T3668] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  704.994909][ T3668] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  705.004508][ T3668] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  705.084817][ T3668] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[  705.123625][  T136] usb 5-1: device descriptor read/64, error 18
[  705.243778][  T136] usb usb5-port1: attempt power cycle
[  705.331175][ T3668] ums-sddr09: probe of 3-1:1.0 failed with error -22
[  705.341486][ T3668] usb 3-1: USB disconnect, device number 11
06:33:30 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:33:30 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:30 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x7, 0x0)

06:33:30 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:30 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  705.693728][  T136] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  705.903750][  T136] usb 5-1: device descriptor read/8, error -61
[  706.193544][  T136] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  706.373710][  T136] usb 5-1: device descriptor read/8, error -61
[  706.494740][  T136] usb usb5-port1: unable to enumerate USB device
06:33:31 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x7, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:33:31 executing program 2:
syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0)

06:33:31 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:31 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x8, 0x0)

06:33:31 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:33:32 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:32 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  707.333547][T10325] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  707.493859][ T3678] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  707.583674][T10325] usb 3-1: Using ep0 maxpacket: 16
[  707.703825][T10325] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  707.713619][ T3678] usb 5-1: device descriptor read/64, error 18
[  707.718132][T10325] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  707.751235][T10325] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  707.766681][T10325] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  707.778133][T10325] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  707.787856][T10325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  707.836324][T10325] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[  707.983542][ T3678] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  708.101293][T10325] ums-sddr09: probe of 3-1:1.0 failed with error -22
[  708.111911][T10325] usb 3-1: USB disconnect, device number 12
[  708.193658][ T3678] usb 5-1: device descriptor read/64, error 18
[  708.327167][ T3678] usb usb5-port1: attempt power cycle
06:33:33 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:33:33 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:33 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x9, 0x0)

06:33:33 executing program 2:
syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0)

06:33:33 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  708.783696][ T3678] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  708.875677][ T3267] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  708.963741][ T3678] usb 5-1: device descriptor read/8, error -61
[  709.123588][ T3267] usb 3-1: Using ep0 maxpacket: 16
[  709.245800][ T3678] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  709.263844][ T3267] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  709.274296][ T3267] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  709.284481][ T3267] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  709.294623][ T3267] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  709.305088][ T3267] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  709.319059][ T3267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  709.376669][ T3267] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[  709.423766][ T3678] usb 5-1: device descriptor read/8, error -61
[  709.555500][ T3678] usb usb5-port1: unable to enumerate USB device
[  709.607567][ T3267] ums-sddr09: probe of 3-1:1.0 failed with error -22
[  709.617960][ T3267] usb 3-1: USB disconnect, device number 13
06:33:35 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x8, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:33:35 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:35 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0xe, 0x0)

06:33:35 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:33:35 executing program 2:
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)

06:33:35 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  710.473642][    T5] usb 5-1: new high-speed USB device number 32 using dummy_hcd
06:33:35 executing program 2:
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)

[  710.673584][    T5] usb 5-1: device descriptor read/64, error 18
[  710.943530][    T5] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  711.133539][    T5] usb 5-1: device descriptor read/64, error 18
[  711.253902][    T5] usb usb5-port1: attempt power cycle
06:33:36 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:33:36 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x300, 0x0)

06:33:36 executing program 2:
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)

06:33:36 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  711.663567][    T5] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  711.883792][    T5] usb 5-1: device descriptor read/8, error -61
06:33:36 executing program 2:
r0 = syz_usb_connect(0x0, 0x10b, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

[  712.193547][    T5] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  712.383823][    T5] usb 5-1: device descriptor read/8, error -61
[  712.504040][    T5] usb usb5-port1: unable to enumerate USB device
06:33:38 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x500, 0x0)

06:33:38 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:38 executing program 2:
r0 = syz_usb_connect(0x0, 0x10b, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:33:38 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:33:38 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

[  713.643766][ T3678] usb 5-1: new high-speed USB device number 36 using dummy_hcd
06:33:38 executing program 2:
r0 = syz_usb_connect(0x0, 0x10b, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

[  713.873705][ T3678] usb 5-1: device descriptor read/64, error 18
[  714.173663][ T3678] usb 5-1: new high-speed USB device number 37 using dummy_hcd
06:33:39 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

[  714.374313][ T3678] usb 5-1: device descriptor read/64, error 18
[  714.499321][ T3678] usb usb5-port1: attempt power cycle
06:33:39 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:33:39 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x600, 0x0)

06:33:39 executing program 2:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:33:39 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

06:33:39 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:33:39 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

06:33:39 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

[  714.863577][    T5] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  714.953770][ T3678] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  715.063584][    T5] usb 3-1: device descriptor read/64, error 18
[  715.163727][ T3678] usb 5-1: device descriptor read/8, error -61
[  715.333550][    T5] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  715.443626][ T3678] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  715.523579][    T5] usb 3-1: device descriptor read/64, error 18
[  715.633686][ T3678] usb 5-1: device descriptor read/8, error -61
[  715.653869][    T5] usb usb3-port1: attempt power cycle
[  715.753779][ T3678] usb usb5-port1: unable to enumerate USB device
[  716.073715][    T5] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  716.243666][    T5] usb 3-1: device descriptor read/8, error -61
06:33:41 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x2, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:33:41 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:33:41 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:41 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x700, 0x0)

06:33:41 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e604030077010000000109022400010100"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

[  716.513530][    T5] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  716.693611][    T5] usb 3-1: device descriptor read/8, error -61
[  716.763733][ T3678] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  716.813751][    T5] usb usb3-port1: unable to enumerate USB device
[  717.023586][ T3678] usb 5-1: Using ep0 maxpacket: 16
[  717.173779][ T3678] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  717.184262][ T3678] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  717.193360][ T3678] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  717.209221][ T3678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
06:33:42 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x900, 0x0)

06:33:42 executing program 5:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x6, 0x0)

06:33:42 executing program 2:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:33:42 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

[  718.063662][    T5] usb 3-1: new high-speed USB device number 18 using dummy_hcd
06:33:43 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  718.253613][    T5] usb 3-1: device descriptor read/64, error 18
06:33:43 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:33:43 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0xe00, 0x0)

[  718.523702][    T5] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  718.713665][    T5] usb 3-1: device descriptor read/64, error 18
[  718.836108][    T5] usb usb3-port1: attempt power cycle
[  719.243616][    T5] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  719.413761][    T5] usb 3-1: device descriptor read/8, error -61
06:33:44 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x3, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:33:44 executing program 5:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:33:44 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x2000, 0x0)

06:33:44 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e604030077010000000109022400010100"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:33:44 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

[  719.466531][T10325] usb 5-1: USB disconnect, device number 40
[  719.683711][    T5] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  719.883848][    T5] usb 3-1: device descriptor read/8, error -61
[  719.933628][T10325] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  720.004388][    T5] usb usb3-port1: unable to enumerate USB device
[  720.188817][T10325] usb 5-1: Using ep0 maxpacket: 16
06:33:45 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x200000, 0x0)

[  720.313667][T10325] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  720.329774][T10325] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  720.339029][T10325] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  720.348416][T10325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
06:33:45 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:33:45 executing program 2:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:33:45 executing program 5:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:33:45 executing program 5:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:33:45 executing program 5:
syz_open_procfs(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000400))

[  721.113721][    T5] usb 3-1: new high-speed USB device number 22 using dummy_hcd
06:33:46 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x1000000, 0x0)

[  721.313618][    T5] usb 3-1: device descriptor read/64, error 18
[  721.583589][    T5] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  721.773740][    T5] usb 3-1: device descriptor read/64, error 18
[  721.894415][    T5] usb usb3-port1: attempt power cycle
[  722.313566][    T5] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  722.483693][    T5] usb 3-1: device descriptor read/8, error -61
[  722.541584][T10325] usb 5-1: USB disconnect, device number 41
06:33:47 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0) (fail_nth: 1)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:47 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:33:47 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x4, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:33:47 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x2000000, 0x0)

06:33:47 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e604030077010000000109022400010100"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

[  722.689637][T10562] FAULT_INJECTION: forcing a failure.
[  722.689637][T10562] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  722.739626][T10562] CPU: 1 PID: 10562 Comm: syz-executor.5 Not tainted 5.16.0-rc5-syzkaller #0
[  722.748455][T10562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  722.753617][    T5] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  722.758522][T10562] Call Trace:
[  722.758536][T10562]  <TASK>
[  722.758545][T10562]  dump_stack_lvl+0x201/0x2d8
[  722.758577][T10562]  ? show_regs_print_info+0x12/0x12
[  722.758599][T10562]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  722.758623][T10562]  ? __might_fault+0xb6/0x110
[  722.758643][T10562]  ? __lock_acquire+0x2b00/0x2b00
[  722.797734][T10562]  should_fail+0x384/0x4b0
[  722.802153][T10562]  _copy_from_user+0x2d/0x170
[  722.806817][T10562]  iovec_from_user+0x13f/0x390
[  722.811571][T10562]  ? rcu_lock_release+0x9/0x20
[  722.816339][T10562]  __import_iovec+0xc6/0x530
[  722.820941][T10562]  ? iovec_from_user+0x390/0x390
[  722.825876][T10562]  import_iovec+0xe6/0x120
[  722.830310][T10562]  do_preadv+0x1d6/0x350
[  722.834549][T10562]  ? do_writev+0x470/0x470
[  722.838951][T10562]  ? __context_tracking_exit+0x7a/0xd0
[  722.844419][T10562]  ? lockdep_hardirqs_on_prepare+0x412/0x780
[  722.850581][T10562]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  722.856555][T10562]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  722.862526][T10562]  ? lockdep_hardirqs_on+0x95/0x140
[  722.867725][T10562]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  722.873841][T10562]  do_syscall_64+0x44/0xd0
[  722.878366][T10562]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  722.884353][T10562] RIP: 0033:0x7f82ce494e99
[  722.888775][T10562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  722.908416][T10562] RSP: 002b:00007f82cce0a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  722.916821][T10562] RAX: ffffffffffffffda RBX: 00007f82ce5a7f60 RCX: 00007f82ce494e99
[  722.924799][T10562] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003
[  722.932777][T10562] RBP: 00007f82cce0a1d0 R08: 0000000000000000 R09: 0000000000000000
[  722.933860][    T5] usb 3-1: device descriptor read/8, error -61
[  722.940738][T10562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  722.940754][T10562] R13: 00007ffe05db4eaf R14: 00007f82cce0a300 R15: 0000000000022000
[  722.940786][T10562]  </TASK>
06:33:47 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0) (fail_nth: 2)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  723.073709][T10325] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  723.093928][    T5] usb usb3-port1: unable to enumerate USB device
[  723.191931][T10571] FAULT_INJECTION: forcing a failure.
[  723.191931][T10571] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  723.208496][T10571] CPU: 0 PID: 10571 Comm: syz-executor.5 Not tainted 5.16.0-rc5-syzkaller #0
[  723.217299][T10571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  723.227461][T10571] Call Trace:
[  723.230759][T10571]  <TASK>
[  723.233698][T10571]  dump_stack_lvl+0x201/0x2d8
[  723.238397][T10571]  ? show_regs_print_info+0x12/0x12
[  723.243607][T10571]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  723.249428][T10571]  ? __might_fault+0xb6/0x110
[  723.254118][T10571]  ? __lock_acquire+0x2b00/0x2b00
[  723.259179][T10571]  should_fail+0x384/0x4b0
[  723.263594][T10571]  _copy_from_user+0x2d/0x170
[  723.268257][T10571]  iovec_from_user+0x13f/0x390
[  723.273006][T10571]  ? rcu_lock_release+0x9/0x20
[  723.277761][T10571]  __import_iovec+0xc6/0x530
[  723.282357][T10571]  ? iovec_from_user+0x390/0x390
[  723.287296][T10571]  import_iovec+0xe6/0x120
[  723.291705][T10571]  do_preadv+0x1d6/0x350
[  723.295934][T10571]  ? do_writev+0x470/0x470
[  723.300332][T10571]  ? __context_tracking_exit+0x7a/0xd0
[  723.305782][T10571]  ? lockdep_hardirqs_on_prepare+0x412/0x780
[  723.311746][T10571]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  723.317714][T10571]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  723.323679][T10571]  ? lockdep_hardirqs_on+0x95/0x140
[  723.328860][T10571]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  723.334827][T10571]  do_syscall_64+0x44/0xd0
[  723.339244][T10571]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  723.345213][T10571] RIP: 0033:0x7f82ce494e99
[  723.349618][T10571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  723.369211][T10571] RSP: 002b:00007f82cce0a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  723.377611][T10571] RAX: ffffffffffffffda RBX: 00007f82ce5a7f60 RCX: 00007f82ce494e99
[  723.385570][T10571] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003
[  723.393524][T10571] RBP: 00007f82cce0a1d0 R08: 0000000000000000 R09: 0000000000000000
[  723.401478][T10571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  723.409442][T10571] R13: 00007ffe05db4eaf R14: 00007f82cce0a300 R15: 0000000000022000
[  723.417418][T10571]  </TASK>
06:33:48 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0) (fail_nth: 3)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  723.473576][T10325] usb 5-1: Using ep0 maxpacket: 16
[  723.594056][T10325] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  723.604444][T10325] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  723.614129][T10325] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  723.623404][T10325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  723.641835][T10574] FAULT_INJECTION: forcing a failure.
[  723.641835][T10574] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  723.665704][T10574] CPU: 0 PID: 10574 Comm: syz-executor.5 Not tainted 5.16.0-rc5-syzkaller #0
[  723.674500][T10574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  723.684555][T10574] Call Trace:
[  723.687830][T10574]  <TASK>
[  723.690750][T10574]  dump_stack_lvl+0x201/0x2d8
[  723.695426][T10574]  ? show_regs_print_info+0x12/0x12
[  723.700614][T10574]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  723.706324][T10574]  ? __might_fault+0xb6/0x110
[  723.710991][T10574]  ? __lock_acquire+0x2b00/0x2b00
[  723.716010][T10574]  should_fail+0x384/0x4b0
[  723.720425][T10574]  _copy_from_user+0x2d/0x170
[  723.725094][T10574]  iovec_from_user+0x13f/0x390
[  723.729849][T10574]  ? rcu_lock_release+0x9/0x20
[  723.734604][T10574]  __import_iovec+0xc6/0x530
[  723.739191][T10574]  ? iovec_from_user+0x390/0x390
[  723.744126][T10574]  import_iovec+0xe6/0x120
[  723.748537][T10574]  do_preadv+0x1d6/0x350
[  723.752774][T10574]  ? do_writev+0x470/0x470
[  723.757181][T10574]  ? __context_tracking_exit+0x7a/0xd0
[  723.762641][T10574]  ? lockdep_hardirqs_on_prepare+0x412/0x780
[  723.768880][T10574]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  723.774860][T10574]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  723.780829][T10574]  ? lockdep_hardirqs_on+0x95/0x140
[  723.786017][T10574]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  723.791987][T10574]  do_syscall_64+0x44/0xd0
[  723.796398][T10574]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  723.802280][T10574] RIP: 0033:0x7f82ce494e99
[  723.806691][T10574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  723.826289][T10574] RSP: 002b:00007f82cce0a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  723.834697][T10574] RAX: ffffffffffffffda RBX: 00007f82ce5a7f60 RCX: 00007f82ce494e99
[  723.842657][T10574] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003
[  723.850632][T10574] RBP: 00007f82cce0a1d0 R08: 0000000000000000 R09: 0000000000000000
[  723.858606][T10574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  723.866572][T10574] R13: 00007ffe05db4eaf R14: 00007f82cce0a300 R15: 0000000000022000
[  723.874640][T10574]  </TASK>
06:33:48 executing program 2:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:33:48 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x3000000, 0x0)

06:33:48 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:33:48 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0) (fail_nth: 4)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  724.162991][T10585] FAULT_INJECTION: forcing a failure.
[  724.162991][T10585] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  724.191741][T10585] CPU: 0 PID: 10585 Comm: syz-executor.5 Not tainted 5.16.0-rc5-syzkaller #0
[  724.200539][T10585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  724.210588][T10585] Call Trace:
[  724.213860][T10585]  <TASK>
[  724.216785][T10585]  dump_stack_lvl+0x201/0x2d8
[  724.221483][T10585]  ? show_regs_print_info+0x12/0x12
[  724.226675][T10585]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  724.232391][T10585]  ? __might_fault+0xb6/0x110
[  724.237057][T10585]  ? __lock_acquire+0x2b00/0x2b00
[  724.242085][T10585]  should_fail+0x384/0x4b0
[  724.246515][T10585]  _copy_from_user+0x2d/0x170
[  724.251209][T10585]  iovec_from_user+0x13f/0x390
[  724.255974][T10585]  ? rcu_lock_release+0x9/0x20
[  724.260737][T10585]  __import_iovec+0xc6/0x530
[  724.265341][T10585]  ? iovec_from_user+0x390/0x390
[  724.270275][T10585]  import_iovec+0xe6/0x120
[  724.274696][T10585]  do_preadv+0x1d6/0x350
[  724.278929][T10585]  ? do_writev+0x470/0x470
[  724.283331][T10585]  ? __context_tracking_exit+0x7a/0xd0
[  724.288790][T10585]  ? lockdep_hardirqs_on_prepare+0x412/0x780
[  724.294759][T10585]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  724.300730][T10585]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  724.306703][T10585]  ? lockdep_hardirqs_on+0x95/0x140
[  724.311914][T10585]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  724.317880][T10585]  do_syscall_64+0x44/0xd0
[  724.322303][T10585]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  724.328180][T10585] RIP: 0033:0x7f82ce494e99
[  724.332588][T10585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  724.352266][T10585] RSP: 002b:00007f82cce0a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  724.360769][T10585] RAX: ffffffffffffffda RBX: 00007f82ce5a7f60 RCX: 00007f82ce494e99
[  724.368732][T10585] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003
[  724.376743][T10585] RBP: 00007f82cce0a1d0 R08: 0000000000000000 R09: 0000000000000000
[  724.384706][T10585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  724.392667][T10585] R13: 00007ffe05db4eaf R14: 00007f82cce0a300 R15: 0000000000022000
[  724.400662][T10585]  </TASK>
06:33:49 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0) (fail_nth: 5)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  724.623826][  T136] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  724.656609][T10589] FAULT_INJECTION: forcing a failure.
[  724.656609][T10589] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  724.677606][T10589] CPU: 0 PID: 10589 Comm: syz-executor.5 Not tainted 5.16.0-rc5-syzkaller #0
[  724.686405][T10589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  724.696457][T10589] Call Trace:
[  724.699732][T10589]  <TASK>
[  724.702709][T10589]  dump_stack_lvl+0x201/0x2d8
[  724.707393][T10589]  ? show_regs_print_info+0x12/0x12
[  724.712609][T10589]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  724.718347][T10589]  ? __might_fault+0xb6/0x110
[  724.723021][T10589]  ? __lock_acquire+0x2b00/0x2b00
[  724.728066][T10589]  should_fail+0x384/0x4b0
[  724.732484][T10589]  _copy_from_user+0x2d/0x170
[  724.737155][T10589]  iovec_from_user+0x13f/0x390
[  724.741939][T10589]  ? rcu_lock_release+0x9/0x20
[  724.746718][T10589]  __import_iovec+0xc6/0x530
[  724.751414][T10589]  ? iovec_from_user+0x390/0x390
[  724.756359][T10589]  import_iovec+0xe6/0x120
[  724.760789][T10589]  do_preadv+0x1d6/0x350
[  724.766240][T10589]  ? do_writev+0x470/0x470
[  724.770659][T10589]  ? __context_tracking_exit+0x7a/0xd0
[  724.776118][T10589]  ? lockdep_hardirqs_on_prepare+0x412/0x780
[  724.782089][T10589]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  724.788093][T10589]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  724.794107][T10589]  ? lockdep_hardirqs_on+0x95/0x140
[  724.799337][T10589]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  724.805387][T10589]  do_syscall_64+0x44/0xd0
[  724.809833][T10589]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  724.815836][T10589] RIP: 0033:0x7f82ce494e99
[  724.820267][T10589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  724.839890][T10589] RSP: 002b:00007f82cce0a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  724.848302][T10589] RAX: ffffffffffffffda RBX: 00007f82ce5a7f60 RCX: 00007f82ce494e99
[  724.856291][T10589] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003
[  724.864267][T10589] RBP: 00007f82cce0a1d0 R08: 0000000000000000 R09: 0000000000000000
06:33:49 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x4000000, 0x0)

06:33:49 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

[  724.872408][T10589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  724.880391][T10589] R13: 00007ffe05db4eaf R14: 00007f82cce0a300 R15: 0000000000022000
[  724.888401][T10589]  </TASK>
[  724.963752][  T136] usb 3-1: device descriptor read/64, error 18
[  725.253559][  T136] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  725.463747][  T136] usb 3-1: device descriptor read/64, error 18
[  725.583725][  T136] usb usb3-port1: attempt power cycle
[  725.687741][ T3267] usb 5-1: USB disconnect, device number 42
06:33:50 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x5, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:33:50 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0) (fail_nth: 6)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:50 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x5000000, 0x0)

06:33:50 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

[  725.878746][T10601] FAULT_INJECTION: forcing a failure.
[  725.878746][T10601] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  725.902306][T10601] CPU: 1 PID: 10601 Comm: syz-executor.5 Not tainted 5.16.0-rc5-syzkaller #0
[  725.911107][T10601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  725.921174][T10601] Call Trace:
[  725.924449][T10601]  <TASK>
[  725.927371][T10601]  dump_stack_lvl+0x201/0x2d8
[  725.932050][T10601]  ? show_regs_print_info+0x12/0x12
[  725.937248][T10601]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  725.942958][T10601]  ? __might_fault+0xb6/0x110
[  725.947627][T10601]  ? __lock_acquire+0x2b00/0x2b00
[  725.952648][T10601]  should_fail+0x384/0x4b0
[  725.957059][T10601]  _copy_from_user+0x2d/0x170
[  725.961725][T10601]  iovec_from_user+0x13f/0x390
[  725.966479][T10601]  ? rcu_lock_release+0x9/0x20
[  725.971241][T10601]  __import_iovec+0xc6/0x530
[  725.975830][T10601]  ? iovec_from_user+0x390/0x390
[  725.980764][T10601]  import_iovec+0xe6/0x120
[  725.985177][T10601]  do_preadv+0x1d6/0x350
[  725.989413][T10601]  ? do_writev+0x470/0x470
[  725.993816][T10601]  ? __context_tracking_exit+0x7a/0xd0
[  725.999278][T10601]  ? lockdep_hardirqs_on_prepare+0x412/0x780
[  726.005250][T10601]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  726.011231][T10601]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  726.017203][T10601]  ? lockdep_hardirqs_on+0x95/0x140
[  726.022524][T10601]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  726.028514][T10601]  do_syscall_64+0x44/0xd0
[  726.032941][T10601]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  726.038840][T10601] RIP: 0033:0x7f82ce494e99
[  726.043250][T10601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  726.062847][T10601] RSP: 002b:00007f82cce0a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  726.071258][T10601] RAX: ffffffffffffffda RBX: 00007f82ce5a7f60 RCX: 00007f82ce494e99
06:33:51 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

[  726.079222][T10601] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003
[  726.087184][T10601] RBP: 00007f82cce0a1d0 R08: 0000000000000000 R09: 0000000000000000
[  726.095143][T10601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  726.103104][T10601] R13: 00007ffe05db4eaf R14: 00007f82cce0a300 R15: 0000000000022000
[  726.111078][T10601]  </TASK>
[  726.203627][  T136] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  726.423914][ T3267] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  726.431648][  T136] usb 3-1: device descriptor read/8, error -61
[  726.703572][ T3267] usb 5-1: Using ep0 maxpacket: 16
[  726.713715][  T136] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  726.854735][ T3267] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  726.865182][ T3267] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  726.879305][ T3267] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  726.888994][ T3267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  726.913967][  T136] usb 3-1: device descriptor read/8, error -61
06:33:51 executing program 2:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:33:51 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0) (fail_nth: 7)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:51 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x6000000, 0x0)

06:33:51 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x6, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

[  726.954718][ T3267] ums-sddr09 5-1:1.0: USB Mass Storage device detected
06:33:52 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

[  727.044539][  T136] usb usb3-port1: unable to enumerate USB device
[  727.473712][  T136] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  727.673576][  T136] usb 3-1: device descriptor read/64, error 18
06:33:52 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:52 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x7000000, 0x0)

[  727.953694][  T136] usb 3-1: new high-speed USB device number 31 using dummy_hcd
06:33:53 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

[  728.153817][  T136] usb 3-1: device descriptor read/64, error 18
06:33:53 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0x3c0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  728.276078][  T136] usb usb3-port1: attempt power cycle
06:33:53 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0x20000400}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  728.733643][  T136] usb 3-1: new high-speed USB device number 32 using dummy_hcd
06:33:53 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

[  728.788562][    T5] usb 5-1: USB disconnect, device number 43
06:33:53 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x8000000, 0x0)

[  728.923796][  T136] usb 3-1: device descriptor read/8, error -61
[  729.213574][    T5] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  729.215086][  T136] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  729.414033][  T136] usb 3-1: device descriptor read/8, error -61
[  729.463656][    T5] usb 5-1: Using ep0 maxpacket: 16
[  729.533998][  T136] usb usb3-port1: unable to enumerate USB device
[  729.583639][    T5] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  729.594666][    T5] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  729.607639][    T5] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  729.616817][    T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  729.664648][    T5] ums-sddr09 5-1:1.0: USB Mass Storage device detected
06:33:55 executing program 2:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:33:55 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:33:55 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0x7ffff000}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:55 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x7, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:33:55 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x9000000, 0x0)

06:33:55 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xffffffffffffffff}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:55 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0xe, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:33:55 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x2, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  730.523829][    T5] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  730.723762][    T5] usb 3-1: device descriptor read/64, error 18
06:33:55 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:33:55 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0xe000000, 0x0)

[  730.993578][    T5] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  731.193783][    T5] usb 3-1: device descriptor read/64, error 18
[  731.314189][    T5] usb usb3-port1: attempt power cycle
[  731.724800][    T5] usb 3-1: new high-speed USB device number 36 using dummy_hcd
06:33:56 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:33:56 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

[  731.828578][T10325] usb 5-1: USB disconnect, device number 44
[  731.894584][    T5] usb 3-1: device descriptor read/8, error -61
[  732.163535][    T5] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  732.263636][T10325] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  732.333734][    T5] usb 3-1: device descriptor read/8, error -61
[  732.454789][    T5] usb usb3-port1: unable to enumerate USB device
[  732.503581][T10325] usb 5-1: Using ep0 maxpacket: 16
[  732.624064][T10325] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  732.634338][T10325] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  732.647610][T10325] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  732.661425][T10325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  732.704705][T10325] ums-sddr09 5-1:1.0: USB Mass Storage device detected
06:33:58 executing program 2:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e604030077010000000109022400010100"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:33:58 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x3, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:58 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x20000000, 0x0)

06:33:58 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:33:58 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:33:58 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x4, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:58 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x300, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:33:58 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x5, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:33:58 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

[  733.564217][    T5] usb 3-1: new high-speed USB device number 38 using dummy_hcd
06:33:58 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x500, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

[  733.804005][    T5] usb 3-1: Using ep0 maxpacket: 16
[  733.923823][    T5] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  733.953973][    T5] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  733.964663][    T5] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  733.983786][    T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
06:33:59 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:33:59 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x6, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  734.880583][ T3267] usb 5-1: USB disconnect, device number 45
[  735.384514][ T3267] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  735.633507][ T3267] usb 5-1: Using ep0 maxpacket: 16
[  735.753623][ T3267] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  735.763968][ T3267] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  735.774057][ T3267] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  735.784200][ T3267] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  735.797299][ T3267] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  735.806749][ T3267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  735.870390][ T3267] ums-sddr09 5-1:1.0: USB Mass Storage device detected
06:34:01 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0xfeffffff, 0x0)

06:34:01 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:34:01 executing program 2:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e604030077010000000109022400010100"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:34:01 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x7, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:34:01 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x600, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

[  736.149286][ T3668] usb 3-1: USB disconnect, device number 38
06:34:01 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:34:01 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x8, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:34:01 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:34:01 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

[  736.613719][ T3668] usb 3-1: new high-speed USB device number 39 using dummy_hcd
06:34:01 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

[  736.853554][ T3668] usb 3-1: Using ep0 maxpacket: 16
[  736.974077][ T3668] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  737.000077][ T3668] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  737.010531][ T3668] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  737.041714][ T3668] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
06:34:02 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:34:02 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0xffffff7f, 0x0)

06:34:02 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:34:02 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x300, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  737.957380][ T3267] usb 5-1: USB disconnect, device number 46
[  738.473591][ T3267] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  738.713557][ T3267] usb 5-1: Using ep0 maxpacket: 16
[  738.833705][ T3267] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  738.851037][ T3267] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  738.860825][ T3267] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  738.875543][ T3267] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  738.890997][ T3267] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  738.902617][ T3267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  738.954878][ T3267] ums-sddr09 5-1:1.0: USB Mass Storage device detected
06:34:04 executing program 2:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e604030077010000000109022400010100"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:34:04 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:34:04 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:34:04 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0xfffffffe, 0x0)

06:34:04 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x700, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

[  739.238858][ T3267] usb 3-1: USB disconnect, device number 39
06:34:04 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:34:04 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:34:04 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x2, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  739.663598][ T3267] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  739.913536][ T3267] usb 3-1: Using ep0 maxpacket: 16
[  740.033678][ T3267] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  740.044215][ T3267] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  740.054174][ T3267] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  740.063400][ T3267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
06:34:06 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:34:06 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x3, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:34:06 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0xffffffff, 0x0)

06:34:06 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

[  741.072960][    T5] usb 5-1: USB disconnect, device number 47
[  741.513549][    T5] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  741.753687][    T5] usb 5-1: Using ep0 maxpacket: 16
[  741.874642][    T5] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  741.885976][    T5] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  741.896169][    T5] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  741.906274][    T5] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  741.919247][    T5] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  741.928798][    T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  741.974647][    T5] ums-sddr09 5-1:1.0: USB Mass Storage device detected
06:34:07 executing program 2:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:34:07 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:34:07 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x4, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:34:07 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:34:07 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0xe00, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

[  742.291128][T10325] usb 3-1: USB disconnect, device number 40
06:34:07 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x5, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:34:07 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x6, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  742.803642][T10325] usb 3-1: new high-speed USB device number 41 using dummy_hcd
06:34:08 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x7, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  743.043638][T10325] usb 3-1: Using ep0 maxpacket: 16
06:34:08 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x2)

[  743.164172][T10325] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  743.192184][T10325] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
06:34:08 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

[  743.217784][T10325] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  743.229189][T10325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  743.274649][T10325] ums-sddr09 3-1:1.0: USB Mass Storage device detected
06:34:09 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:34:09 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x8, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  744.142055][  T136] usb 5-1: USB disconnect, device number 48
[  744.615958][  T136] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  744.883526][  T136] usb 5-1: Using ep0 maxpacket: 16
[  745.003645][  T136] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  745.013554][  T136] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  745.023344][  T136] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  745.036413][  T136] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  745.045842][  T136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  745.109169][  T136] ums-sddr09 5-1:1.0: USB Mass Storage device detected
06:34:10 executing program 2:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:34:10 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x3)

06:34:10 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:34:10 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0xe, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:34:10 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x2000, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

[  745.400740][  T136] usb 3-1: USB disconnect, device number 41
06:34:10 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x300, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  745.842611][  T136] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  746.103557][  T136] usb 3-1: Using ep0 maxpacket: 16
06:34:11 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x500, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  746.223929][  T136] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  746.253568][  T136] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
06:34:11 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x4)

[  746.275242][  T136] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  746.287562][  T136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
06:34:11 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

[  746.365347][  T136] ums-sddr09 3-1:1.0: USB Mass Storage device detected
06:34:11 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

[  747.014956][ T1229] ieee802154 phy0 wpan0: encryption failed: -22
[  747.021417][ T1229] ieee802154 phy1 wpan1: encryption failed: -22
06:34:12 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:34:12 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x600, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  747.205738][  T136] usb 5-1: USB disconnect, device number 49
[  747.623558][  T136] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  747.873645][  T136] usb 5-1: Using ep0 maxpacket: 16
[  748.025383][  T136] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  748.035171][  T136] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  748.045232][  T136] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  748.058204][  T136] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  748.071965][  T136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  748.115881][  T136] ums-sddr09 5-1:1.0: USB Mass Storage device detected
06:34:13 executing program 2:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:34:13 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x5)

06:34:13 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:34:13 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x700, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  748.442242][ T3678] usb 3-1: USB disconnect, device number 42
06:34:13 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x200000, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:34:13 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)

06:34:13 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0xe00, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:34:13 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)

[  748.893784][ T3678] usb 3-1: new high-speed USB device number 43 using dummy_hcd
06:34:14 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)

[  749.173858][ T3678] usb 3-1: Using ep0 maxpacket: 16
[  749.319055][ T3678] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  749.336004][ T3678] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  749.350162][ T3678] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
06:34:14 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x6)

[  749.365512][ T3678] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  749.425541][ T3678] ums-sddr09 3-1:1.0: USB Mass Storage device detected
06:34:15 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:34:15 executing program 0:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4)

[  750.256703][ T3671] usb 5-1: USB disconnect, device number 50
[  750.723683][ T3671] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  750.963529][ T3671] usb 5-1: Using ep0 maxpacket: 16
[  751.094795][ T3671] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  751.104658][ T3671] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  751.114885][ T3671] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  751.128034][ T3671] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  751.137455][ T3671] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  751.184552][ T3671] ums-sddr09 5-1:1.0: USB Mass Storage device detected
06:34:16 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x2000, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:34:16 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x7)

06:34:16 executing program 2:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:34:16 executing program 0:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
sendto$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24)

[  751.513825][ T3671] usb 3-1: USB disconnect, device number 43
06:34:16 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x1000000, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:34:16 executing program 0:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004280), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0xc, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}}, 0x0)

06:34:16 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan4\x00', <r1=>0x0})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0)

06:34:16 executing program 0:
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local, 0x801}}, 0x24)

06:34:16 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0)

06:34:16 executing program 0:
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x1, 0x0, @local}}, 0x24)

[  751.903696][ T3671] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  752.153536][ T3671] usb 3-1: Using ep0 maxpacket: 16
[  752.273648][ T3671] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  752.289576][ T3671] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  752.299749][ T3671] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  752.310033][ T3671] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  752.324260][ T3671] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  752.333931][ T3671] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  752.384599][ T3671] ums-sddr09 3-1:1.0: USB Mass Storage device detected
06:34:18 executing program 0:
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000001900), 0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x4d3d}, 0x0, 0x0)

06:34:18 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x200000, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:34:18 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:34:18 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x8)

[  753.348841][ T3678] usb 5-1: USB disconnect, device number 51
[  753.833613][ T3678] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  754.083645][ T3678] usb 5-1: Using ep0 maxpacket: 16
[  754.204468][ T3678] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  754.220520][ T3678] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  754.230534][ T3678] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  754.240614][ T3678] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  754.249913][ T3678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  754.304314][ T3678] ums-sddr09 5-1:1.0: USB Mass Storage device detected
06:34:19 executing program 2:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:34:19 executing program 0:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
connect$unix(r0, &(0x7f0000000340)=@abs, 0x6e)

[  754.554023][ T3659] usb 3-1: USB disconnect, device number 44
06:34:19 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x2000000, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:34:19 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x1000000, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:34:19 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x9)

06:34:19 executing program 0:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x24)

06:34:19 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_int(r0, 0x0, 0x6, 0x0, &(0x7f0000000000))

06:34:19 executing program 0:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004280), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r0, 0x721, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0)

06:34:19 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan4\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0)

[  755.033579][ T3659] usb 3-1: new high-speed USB device number 45 using dummy_hcd
06:34:20 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x3000000, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

[  755.293607][ T3659] usb 3-1: Using ep0 maxpacket: 16
[  755.423773][ T3659] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  755.434183][ T3659] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  755.444428][ T3659] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  755.454584][ T3659] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  755.467933][ T3659] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  755.477333][ T3659] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  755.534784][ T3659] ums-sddr09 3-1:1.0: USB Mass Storage device detected
06:34:21 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:34:21 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x2000000, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  756.422014][T10325] usb 5-1: USB disconnect, device number 52
[  756.843668][T10325] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  757.093533][T10325] usb 5-1: Using ep0 maxpacket: 16
[  757.244208][T10325] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  757.254278][T10325] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  757.264431][T10325] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  757.274718][T10325] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  757.284932][T10325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  757.335047][T10325] ums-sddr09 5-1:1.0: USB Mass Storage device detected
06:34:22 executing program 2:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:34:22 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @dev}, 0xc)

06:34:22 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0xe)

06:34:22 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x3000000, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  757.606825][  T136] usb 3-1: USB disconnect, device number 45
06:34:22 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan3\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_PAN_ID={0x6}]}, 0x24}}, 0x0)

06:34:22 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev}})

06:34:22 executing program 0:
sendmmsg$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0xaf13b51fde9d7cab)

06:34:22 executing program 0:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0xfffffffffffffe24)

06:34:22 executing program 0:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
sendto$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x24)

[  758.053654][  T136] usb 3-1: new high-speed USB device number 46 using dummy_hcd
06:34:23 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x4000000, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

[  758.313669][  T136] usb 3-1: Using ep0 maxpacket: 16
[  758.453818][  T136] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  758.465392][  T136] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  758.475879][  T136] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  758.485730][  T136] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  758.498878][  T136] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  758.508185][  T136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  758.554340][  T136] ums-sddr09 3-1:1.0: USB Mass Storage device detected
06:34:24 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:34:24 executing program 0:
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x3)
mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000100)=""/4096)

[  759.462210][ T3678] usb 5-1: USB disconnect, device number 53
[  759.883820][ T3678] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  760.123587][ T3678] usb 5-1: Using ep0 maxpacket: 16
[  760.243629][ T3678] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  760.253776][ T3678] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  760.263647][ T3678] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  760.273621][ T3678] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  760.288238][ T3678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  760.350399][ T3678] ums-sddr09 5-1:1.0: USB Mass Storage device detected
06:34:25 executing program 2:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:34:25 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x4000000, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:34:25 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x300)

06:34:25 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x5000000, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:34:25 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x0, 0x0, 0xee00}}, {{@in6=@private0}, 0x0, @in6=@mcast1}}, 0xe8)

[  760.669633][ T3267] usb 3-1: USB disconnect, device number 46
06:34:25 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x5000000, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:34:25 executing program 0:
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000140)=""/126)

06:34:25 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/key-users\x00', 0x0, 0x0)
read$char_usb(r0, 0x0, 0x0)

06:34:25 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0)

06:34:25 executing program 0:
pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)

[  761.163632][ T3267] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  761.403668][ T3267] usb 3-1: Using ep0 maxpacket: 16
[  761.524645][ T3267] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  761.543993][ T3267] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  761.554370][ T3267] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  761.567364][ T3267] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  761.576569][ T3267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  761.637259][ T3267] ums-sddr09 3-1:1.0: USB Mass Storage device detected
06:34:27 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:34:27 executing program 0:
r0 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x7000)
shmdt(r0)
pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)

[  762.499783][ T3267] usb 5-1: USB disconnect, device number 54
[  762.933779][ T3267] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  763.173579][ T3267] usb 5-1: Using ep0 maxpacket: 16
[  763.294548][ T3267] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  763.304339][ T3267] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  763.314064][ T3267] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  763.323867][ T3267] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  763.333684][ T3267] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  763.342712][ T3267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  763.386427][ T3267] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  763.594960][ T3267] scsi host1: usb-storage 5-1:1.0
06:34:28 executing program 2:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:34:28 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x6000000, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:34:28 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x500)

06:34:28 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x6000000, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:34:28 executing program 0:
msgget$private(0x0, 0x0)
r0 = msgget(0x0, 0x200)
msgsnd(r0, &(0x7f0000000180)={0x1}, 0x8, 0x0)
msgctl$IPC_RMID(0x0, 0x0)
msgctl$MSG_INFO(0x0, 0xc, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

[  763.741531][ T3267] usb 3-1: USB disconnect, device number 47
06:34:28 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000002040)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000680)="bc", 0x1}], 0x1, &(0x7f0000000740)=[@hopopts={{0x18}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)='\b', 0x1}, {&(0x7f0000000980)='\n', 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000001c00)=[{0x0}, {&(0x7f0000000b80)='+', 0x1}, {&(0x7f0000000c00)="1d", 0x1}], 0x3}}], 0x3, 0x8000)

[  763.810126][  T136] usb 5-1: USB disconnect, device number 55
06:34:28 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000002040)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x20008014)

06:34:28 executing program 0:
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000001100)=[{&(0x7f0000000000)='d', 0x1}, {0x0}], 0x2, 0x0)

06:34:28 executing program 0:
shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x7000)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000)

06:34:29 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x7000000, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  764.212861][ T3267] usb 3-1: new high-speed USB device number 48 using dummy_hcd
06:34:29 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:34:29 executing program 0:
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)

[  764.463546][ T3267] usb 3-1: Using ep0 maxpacket: 16
[  764.583667][ T3267] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  764.593360][ T3267] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  764.603196][ T3267] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  764.618085][ T3267] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  764.627655][ T3267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  764.663654][T10325] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  764.684675][ T3267] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[  764.923666][T10325] usb 5-1: Using ep0 maxpacket: 16
[  765.073826][T10325] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  765.083866][T10325] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  765.107488][T10325] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  765.125389][T10325] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  765.136074][T10325] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  765.152627][T10325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  765.224787][T10325] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  765.444560][T10325] scsi host1: usb-storage 5-1:1.0
[  765.651894][ T3267] usb 5-1: USB disconnect, device number 56
06:34:31 executing program 2:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:34:31 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000100)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dstopts={{0x18}}], 0x18}, 0x0)

06:34:31 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x600)

[  766.789961][ T3678] usb 3-1: USB disconnect, device number 48
06:34:31 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x7000000, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:34:31 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x8000000, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:34:31 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:34:31 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000100)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0}, 0x0)

06:34:31 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000000000)={'team0\x00', @ifru_ivalue})

06:34:31 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0)
symlinkat(&(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00')

06:34:32 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3)
recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)

06:34:32 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0xe000000, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:34:32 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0xe000000, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

[  767.163581][ T3669] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  767.263535][ T3678] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  767.453668][ T3669] usb 5-1: Using ep0 maxpacket: 16
[  767.543711][ T3678] usb 3-1: Using ep0 maxpacket: 16
[  767.573746][ T3669] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  767.596774][ T3669] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  767.615779][ T3669] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  767.626533][ T3669] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  767.636925][ T3669] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  767.646490][ T3669] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  767.663822][ T3678] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  767.680697][ T3678] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  767.690731][ T3678] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  767.705057][ T3678] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  767.714414][ T3678] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  767.725012][ T3669] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  767.764612][ T3678] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[  767.955397][ T3669] scsi host1: usb-storage 5-1:1.0
[  768.160356][ T3668] usb 5-1: USB disconnect, device number 57
06:34:34 executing program 2:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:34:34 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0xfeffffff, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:34:34 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x700)

06:34:34 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000100)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@hoplimit={{0x14}}, @hoplimit={{0x14}}], 0x30}, 0x0)

06:34:34 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)

[  769.889493][ T3678] usb 3-1: USB disconnect, device number 49
06:34:34 executing program 0:
shmat(0x0, &(0x7f0000fee000/0x12000)=nil, 0x0)

06:34:34 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

06:34:35 executing program 0:
syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x2000, &(0x7f00000005c0))

06:34:35 executing program 0:
socket$inet6(0xa, 0x3, 0x3)

06:34:35 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0xfffffffe, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:34:35 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f0000001180)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}, 0x0)

[  770.193678][ T3669] usb 5-1: new high-speed USB device number 58 using dummy_hcd
06:34:35 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0xfeffffff, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

[  770.353610][ T3678] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  770.473647][ T3669] usb 5-1: Using ep0 maxpacket: 16
[  770.593598][ T3678] usb 3-1: Using ep0 maxpacket: 16
[  770.652516][ T3669] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  770.672259][ T3669] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  770.682732][ T3669] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  770.693034][ T3669] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  770.703250][ T3669] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  770.712687][ T3669] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  770.714896][ T3678] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  770.731669][ T3678] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  770.746836][ T3678] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  770.759353][ T3678] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  770.769195][ T3678] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  770.774748][ T3669] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  770.814664][ T3678] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[  770.984562][ T3669] scsi host1: usb-storage 5-1:1.0
[  771.189299][ T3678] usb 5-1: USB disconnect, device number 58
06:34:37 executing program 2:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:34:37 executing program 0:
r0 = getpgid(0x0)
waitid(0x2, r0, &(0x7f0000000080), 0x2, 0x0)

06:34:37 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0xffffffff, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:34:37 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0xfffffffe, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:34:37 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x900)

06:34:37 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)

[  772.953598][ T3669] usb 3-1: USB disconnect, device number 50
06:34:37 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3)
sendmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000080)=@sco, 0x80, 0x0}}], 0x1, 0x0)

06:34:38 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200))

06:34:38 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0xffffffff, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

[  773.144475][T11151] EXT4-fs (loop0): VFS: Can't find ext4 filesystem
06:34:38 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmmsg(r0, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005b40)=ANY=[@ANYBLOB="7000000000000000040100000000000038759b33f3e1761a243508db94f6394a9b57db5d8735dc9f9c3660d6271cb315b9c686dfded566fdc18971643f98e8a4a6c8422992687eb4a47c9c77f8a3b994685513597c476b0f28c9837dfd8201758bae5f13356007047fe154c700000000f8000000000000001501000000000000cad8da3744c91e20a51cc62086e16815ad495bfe5e7821184b330bd7a054b39fdfc6308f8b33244f5762ffea8b2f224acbeaa36ef724a0668f84d7ee8485ca16824e6e8cf24e4bbec0b3d946110fbe9d56d14eb7dbb39660987dad2d2776710a41f9913fda4f3db5f69a51d2cad84bf28c3daecf0383ef46dffbe79d89632c995de605a1b518480fa18aa76098ef0fea3c57b810b1d9808a7bb3246adcbae8a9e1be9ff867adb4197ce23be7f6d40bad84e206bbcba6e5d3158a04479c9f970a42a1bbb6828e11b227ec7f3b0eeeffd7b2998cc9b83854003171e76a8047ddc2e2c33934000000006000000000000000050100009e0000000316375a8570161ce9c7c413d0977a63fad1d5e4fcce097d64044f2b765dc855b16d689291f9bd1668d25421759b4a45b03def850db390ac05b454b3a2f28d7078c1b3b0c2b8ae94c5c0de0e00000000c80000000000000012010000050000003fd6e260dec926ecc68ea1476c822966b2e4cabfc818baec4b901ec718e893e44149ec55ffb2e5022d924a38200a0fc0bea85cd183fb4cf71fb44355a319d798be6385f73c43d6537e522ff2916f687233537cc30d5e33e7b14779b52793574ec9653c45c4f1b7221abdbb24d656c44c433f6cda8881b0777a568407e5784d44b484a6298c27252cf893eb22f0eb00030d55939205575aa6836010bfd701869b3bfbad01148ac53141faeea81297dc56a480a40000000000a8000000000000001f0000004d7e00000836ba24ebbd921ecbd50a55332f5372f7d9f7d092a5bb0f9b964a0803c8fa55b98bfd05574a416d0a670d1e39f980a08a362dbf3bb00a516e3e21d86f51dbf9b0c8d5832f9377064215f4a5d090677b7eb14c4886570091e04efa2202f9d979c57761b5fc8d7cf82ca00698a10d597bc8ac3e330f150a5bbb0e2b6e42eb9fe7c39b3d78fe4de75de6c0c8a16901a09d7f83bdb330f3070080"], 0x3b8}}], 0x1, 0x0)

06:34:38 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:34:38 executing program 0:
pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0)

[  773.313821][T10325] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  773.413576][ T3669] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  773.563794][T10325] usb 5-1: Using ep0 maxpacket: 16
[  773.683730][ T3669] usb 3-1: Using ep0 maxpacket: 16
[  773.689352][T10325] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  773.703998][T10325] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  773.717612][T10325] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  773.729072][T10325] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  773.739435][T10325] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  773.748663][T10325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  773.794972][T10325] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  773.813679][ T3669] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  773.824236][ T3669] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  773.834572][ T3669] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  773.852239][ T3669] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  773.861408][ T3669] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  773.924737][ T3669] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[  774.008535][T10325] scsi host1: usb-storage 5-1:1.0
[  774.211962][T10325] usb 5-1: USB disconnect, device number 59
06:34:40 executing program 2:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

06:34:40 executing program 0:
pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0xfffffffffffffffb}, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x1a4f]}, 0x8})

06:34:40 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x2)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:34:40 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0xe00)

06:34:40 executing program 4:
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)

06:34:41 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000100)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@hoplimit={{0x14}}], 0x18}, 0x0)

[  776.036991][ T3678] usb 3-1: USB disconnect, device number 51
06:34:41 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e21, @private}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}}], 0x30}, 0x0)

06:34:41 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f00000011c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x1)

06:34:41 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:34:41 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/igmp\x00')
preadv(r0, &(0x7f00000017c0), 0x333, 0x0, 0x0)

06:34:41 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'sit0\x00', 0x0})

[  776.313534][ T3669] usb 5-1: new high-speed USB device number 60 using dummy_hcd
06:34:41 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x70}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)

[  776.543693][ T3678] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  776.553987][ T3669] usb 5-1: Using ep0 maxpacket: 16
[  776.673865][ T3669] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  776.684033][ T3669] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  776.694719][ T3669] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  776.705197][ T3669] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  776.715408][ T3669] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  776.725105][ T3669] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  776.784857][ T3669] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  776.824128][ T3678] usb 3-1: Using ep0 maxpacket: 16
[  776.953739][ T3678] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  776.963656][ T3678] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  776.973473][ T3678] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  776.983335][ T3678] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  777.003495][ T3678] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  777.020555][ T3669] scsi host1: usb-storage 5-1:1.0
[  777.065506][ T3678] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[  777.220591][ T3678] usb 5-1: USB disconnect, device number 60
06:34:44 executing program 2:
syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)

06:34:44 executing program 0:
r0 = getpid()
process_vm_readv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/33, 0x21}], 0x1, &(0x7f0000001bc0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xffffff7c}, {0x0}, {0x0}, {0x0}], 0x9, 0x0)

06:34:44 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x2000)

06:34:44 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x3)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:34:44 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_ifreq(r0, 0x891c, &(0x7f0000000140)={'nr0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}})

[  779.102896][   T25] usb 3-1: USB disconnect, device number 52
06:34:44 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmmsg(r0, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}, {0x10}], 0x20}}, {{&(0x7f0000003700)=@qipcrtr, 0x80, 0x0}}], 0x2, 0x0)

06:34:44 executing program 0:
mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/4096)

06:34:44 executing program 4:
timer_create(0x6, 0x0, 0x0)

06:34:44 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x2)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:34:44 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000001540)={&(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001480)=[@ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3, 0xde}, @noop]}}}], 0x50}, 0x0)

06:34:44 executing program 4:
syz_emit_ethernet(0x22, &(0x7f0000000100)={@dev, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x16, 0x0, @remote, @multicast1}}}}}, 0x0)

06:34:44 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x4)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  779.543970][   T25] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  779.783600][   T25] usb 3-1: Using ep0 maxpacket: 16
[  779.903659][   T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  779.913661][   T25] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  779.924259][   T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  779.934753][   T25] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  779.945043][   T25] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  779.954537][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  780.014663][   T25] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[  780.260675][   T25] ums-sddr09: probe of 3-1:1.0 failed with error -22
[  780.270126][   T25] usb 3-1: USB disconnect, device number 53
06:34:45 executing program 2:
syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)

06:34:45 executing program 4:
syz_emit_ethernet(0x6e, &(0x7f0000000340)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "95d9c2", 0x38, 0x0, 0x0, @private0, @mcast2, {[@hopopts={0x2c, 0x5, '\x00', [@calipso={0x7, 0x8}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @remote}, @generic={0x0, 0xa, "13f1b8e7ad219ed744ec"}]}]}}}}}, 0x0)

06:34:45 executing program 0:
r0 = socket(0x1, 0x3, 0x0)
connect$packet(r0, 0x0, 0x0)

06:34:45 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x200000)

06:34:45 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x5)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:34:45 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
writev(r1, 0x0, 0x0)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:34:45 executing program 4:
r0 = socket(0x2, 0x3, 0x1)
recvmsg$can_bcm(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0xe2)

06:34:45 executing program 4:
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
fork()

[  781.053516][ T3668] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  781.343575][ T3668] usb 3-1: Using ep0 maxpacket: 16
[  781.504085][ T3668] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  781.514055][ T3668] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  781.524022][ T3668] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  781.533977][ T3668] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  781.543955][ T3668] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  781.553109][ T3668] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  781.606235][ T3668] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[  781.851343][ T3668] ums-sddr09: probe of 3-1:1.0 failed with error -22
[  781.861671][ T3668] usb 3-1: USB disconnect, device number 54
06:34:47 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x3)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:34:47 executing program 4:
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "95d9c2", 0x8, 0x0, 0x0, @private0, @private1, {[@dstopts={0x6}]}}}}}, 0x0)

06:34:47 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x6)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:34:47 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x1000000)

06:34:47 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
writev(r1, 0x0, 0x0)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:34:47 executing program 2:
syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)

06:34:47 executing program 4:
r0 = socket(0x1, 0x3, 0x0)
connect$packet(r0, &(0x7f0000000e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="0f5b8f124215"}, 0x14)

06:34:47 executing program 4:
r0 = socket(0x1, 0x3, 0x0)
recvfrom$packet(r0, 0x0, 0x0, 0x40000001, 0x0, 0x0)

06:34:47 executing program 4:
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x12)
fork()

[  782.953672][ T3668] usb 3-1: new high-speed USB device number 55 using dummy_hcd
06:34:47 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

06:34:47 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x7)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  783.234722][ T3668] usb 3-1: Using ep0 maxpacket: 16
06:34:48 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x8)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  783.377011][ T3668] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  783.420414][ T3668] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  783.454379][ T3668] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  783.482316][ T3668] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  783.517245][ T3668] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  783.541720][ T3668] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  783.625388][ T3668] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[  783.870908][ T3668] ums-sddr09: probe of 3-1:1.0 failed with error -22
[  783.881541][ T3668] usb 3-1: USB disconnect, device number 55
06:34:50 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x4)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:34:50 executing program 4:
r0 = socket(0x2, 0x3, 0x1)
sendto$packet(r0, 0x0, 0x0, 0x4811, 0x0, 0x0)

06:34:50 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x2000000)

06:34:50 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
writev(r1, 0x0, 0x0)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:34:50 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0xe)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:34:50 executing program 2:
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "95d9c2", 0x8, 0x0, 0x0, @private0, @private1, {[@dstopts={0x2c}]}}}}}, 0x0)

06:34:50 executing program 4:
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000580)='./bus\x00', 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
creat(&(0x7f0000000280)='./bus/file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0'])
chdir(&(0x7f0000000540)='./bus\x00')
chdir(&(0x7f0000000140)='./bus\x00')
open(&(0x7f00009e1000)='./file0\x00', 0x7, 0x0)

06:34:50 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in=@dev, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000001c0), 0x8, 0x0)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x8000000000001f4)

06:34:51 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x5)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

[  786.060723][   T26] audit: type=1804 audit(1639463691.001:6): pid=11302 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir354257352/syzkaller.oqQVir/467/bus/file0" dev="sda1" ino=1191 res=1 errno=0
[  786.119363][T11295] overlayfs: './file0' not a directory
06:34:51 executing program 4:
r0 = socket(0x2, 0x3, 0x1)
recvfrom$packet(r0, 0x0, 0x0, 0x40000001, 0x0, 0x0)

06:34:51 executing program 2:
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "95d9c2", 0x8, 0x2f, 0x0, @private0, @private1, {[@dstopts]}}}}}, 0x0)

06:34:51 executing program 2:
syz_emit_ethernet(0x36, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "95d9c2", 0x0, 0x3a, 0x0, @private0, @private1}}}}, 0x0)

06:34:51 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
lseek(r0, 0x0, 0x0)

06:34:51 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

06:34:51 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x3000000)

06:34:51 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
writev(r1, 0x0, 0x0)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:34:51 executing program 4:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, 0x0)

06:34:51 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x300)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:34:51 executing program 2:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r0, 0x89a1, &(0x7f00000001c0)={0x6b, 0x0, 0x0, 0x0, 0x1000})

06:34:51 executing program 4:
prctl$PR_CAP_AMBIENT(0x1b, 0x0, 0x0)

06:34:54 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x6)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:34:54 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
recvmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x60, 0x0)

06:34:54 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r0, 0x4b40, 0x20000000)

06:34:54 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x500)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:34:54 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x4000000)

06:34:54 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
writev(r1, 0x0, 0x0)
r3 = fcntl$dupfd(r0, 0x0, r2)
dup3(r1, r3, 0x0)

06:34:54 executing program 2:
clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x8, 0x0, &(0x7f0000000500)=[0xffffffffffffffff], 0x1}, 0x58)

06:34:54 executing program 4:
add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0)
r2 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r1)
r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2)
keyctl$chown(0x9, r3, 0xffffffffffffffff, 0x0)

06:34:54 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000000)={'vlan1\x00', @ifru_names})

06:34:54 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x600)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:34:54 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000005980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000008c0)={{}, {}, [], {}, [], {}, {0x8}}, 0x24, 0x0)

06:34:54 executing program 2:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x402c5829, 0x0)

06:34:57 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x7)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:34:57 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x0, 0x3}, 0x20)

06:34:57 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@empty}, 0x20)

06:34:57 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x700)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:34:57 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x5000000)

06:34:57 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
writev(r1, 0x0, 0x0)
r3 = fcntl$dupfd(r0, 0x0, r2)
dup3(r1, r3, 0x0)

06:34:57 executing program 4:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
write$FUSE_OPEN(r0, &(0x7f0000000100)={0x20}, 0xfffffffffffffe95)
write$FUSE_STATFS(r0, &(0x7f0000000040)={0x60}, 0x60)

06:34:57 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
recvmmsg$unix(r0, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

06:34:57 executing program 4:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$FUSE_OPEN(r1, &(0x7f0000000100)={0x20}, 0xfffffffffffffe95)
read$FUSE(r0, &(0x7f0000003e00)={0x2020}, 0xfffffffffffffd81)

06:34:57 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast1, @mcast1, @loopback, 0x0, 0x8})

06:34:57 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000080)={0x0, 0x4}, 0x10)

06:34:57 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0xe00)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:35:00 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0xe)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:35:00 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8912, &(0x7f0000000000)={'batadv_slave_0\x00'})

06:35:00 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x2000)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:35:00 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
writev(r1, 0x0, 0x0)
r3 = fcntl$dupfd(r0, 0x0, r2)
dup3(r1, r3, 0x0)

06:35:00 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x6000000)

06:35:00 executing program 2:
semget(0x0, 0x2, 0x200)

06:35:00 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_FREEZE(r0, 0x400c620e, 0x0)
pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x40d}, 0x0, 0x0)

06:35:00 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f00000015c0)='.\x00', 0x0, 0x0)
fchown(r0, 0x0, 0x0)

06:35:00 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x200000)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:35:00 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0)

[  795.790034][T11406] binder: 11404:11406 ioctl 400c620e 0 returned -14
06:35:00 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
getsockopt(r0, 0x0, 0x0, 0x0, 0x0)

06:35:01 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003540)={&(0x7f0000000e40)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x2c}}, 0x0)

[  796.149736][T11415] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
06:35:03 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0)

06:35:03 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x300)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:35:03 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x1000000)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:35:03 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
writev(r1, 0x0, 0x0)
fcntl$dupfd(r0, 0x0, r2)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040))

06:35:03 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x7000000)

06:35:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)={0x14}, 0x33fe0}}, 0x6e76)

06:35:03 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x0, @local}, {0x0, @random="be88813c4f5a"}, 0x4c, {}, 'batadv_slave_1\x00'})

06:35:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003540)={&(0x7f0000000e40)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x4, 0x300}]}, 0x18}}, 0x0)

06:35:03 executing program 4:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)

06:35:03 executing program 4:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
sendfile(r0, r1, 0x0, 0x201000)

06:35:03 executing program 2:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x600000, 0x0)

06:35:04 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x2000000)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:35:04 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/xfrm_stat\x00')
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, 0x0)

06:35:06 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x500)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:35:06 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r1, 0x1, 0x0, 0x0, {0x2}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}]}, 0x34}}, 0x0)

06:35:06 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x3000000)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:35:06 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
writev(r1, 0x0, 0x0)
fcntl$dupfd(r0, 0x0, r2)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040))

06:35:06 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x8000000)

06:35:06 executing program 4:
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)

06:35:06 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x28, r1, 0x1, 0x0, 0x0, {0x2}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x28}}, 0x0)

06:35:06 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8905, 0x0)

06:35:06 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x4000000)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:35:06 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/xfrm_stat\x00')
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0)

06:35:06 executing program 2:
syz_io_uring_setup(0x0, &(0x7f0000003080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000003100), &(0x7f0000003140))

06:35:07 executing program 2:
syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff)

06:35:09 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x600)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:35:09 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000140), 0x0, 0x0)

06:35:09 executing program 2:
pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)

06:35:09 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x5000000)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:35:09 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
writev(r1, 0x0, 0x0)
fcntl$dupfd(r0, 0x0, r2)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040))

06:35:09 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x9000000)

06:35:09 executing program 2:
r0 = socket$pppoe(0x18, 0x1, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000b00)=""/183, &(0x7f0000000bc0)=0xb7)

06:35:09 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x20}}, 0x0)

06:35:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002200), 0xffffffffffffffff)
recvmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000100)=@ll, 0x80, 0x0, 0x0, &(0x7f0000000300)=""/193, 0xc1}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003540)={&(0x7f0000000e40)={0x14, r1, 0x1}, 0x14}}, 0x0)

06:35:10 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000009540)={0x0, 0x0, &(0x7f0000009500)={&(0x7f0000007bc0)={0x14, r1, 0x101}, 0x14}}, 0x0)

06:35:10 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x10, 0x4, 0x4, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x40)

06:35:10 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x38}}, 0x0)

06:35:13 executing program 4:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000005dc0)='gid_map\x00')
syz_open_procfs(0xffffffffffffffff, &(0x7f0000006080)='mountinfo\x00')

06:35:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r1, 0x201, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x34}}, 0x0)

06:35:13 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
writev(r1, 0x0, 0x0)
r3 = dup3(r1, 0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040))

06:35:13 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0xe000000)

06:35:13 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x6000000)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:35:13 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x700)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:35:13 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000000)={'dummy0\x00', @ifru_hwaddr=@remote})

06:35:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003540)={&(0x7f0000000e40)={0x14, r1, 0x1}, 0x14}}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r2, 0x303}, 0x14}}, 0x0)

06:35:13 executing program 4:
pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0xffffffffffffffff)

06:35:13 executing program 4:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000a80))

06:35:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x48}}, 0x0)

06:35:13 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000000ac0)={0x30, r1, 0x5, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}}, 0x0)

06:35:13 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x7000000)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:35:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x48}}, 0x0)

[  808.444610][ T1229] ieee802154 phy0 wpan0: encryption failed: -22
[  808.451156][ T1229] ieee802154 phy1 wpan1: encryption failed: -22
06:35:14 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
writev(r1, 0x0, 0x0)
r3 = dup3(r1, 0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040))

06:35:16 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0xe00)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:35:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003540)={&(0x7f0000000e40)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x5, 0x2, 'team0\x00'}]}]}, 0x2c}}, 0x0)

06:35:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x48}}, 0x0)

06:35:16 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x8000000)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:35:16 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x20000000)

06:35:16 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
writev(r1, 0x0, 0x0)
r3 = dup3(r1, 0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040))

[  808.600189][T11533] MPTCP: kernel_bind error, err=-98
06:35:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x48}}, 0x0)

06:35:16 executing program 4:
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x6b71, &(0x7f0000003080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000003100), &(0x7f0000003140))

06:35:16 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0xe000000)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  811.314836][T11543] MPTCP: kernel_bind error, err=-98
06:35:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x48, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x48}}, 0x0)

06:35:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x48, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x48}}, 0x0)

06:35:16 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score\x00')
write$cgroup_freezer_state(r0, 0x0, 0x0)

06:35:19 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x2000)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:35:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x48, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x48}}, 0x0)

06:35:19 executing program 4:
semget(0x0, 0x0, 0x6d3)

06:35:19 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0xfeffffff)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:35:19 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:35:19 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0xfeffffff)

06:35:19 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x600000, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, 0x0, 0x0)

06:35:19 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x48, r0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x48}}, 0x0)

06:35:19 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:35:19 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x48, r0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x48}}, 0x0)

06:35:19 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score\x00')
sendmsg$IPVS_CMD_GET_SERVICE(r0, 0x0, 0x0)

06:35:19 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:35:22 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x200000)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:35:22 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x48, r0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x48}}, 0x0)

06:35:22 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000000)='net/xfrm_stat\x00')
socket$can_j1939(0x1d, 0x2, 0x7)

06:35:22 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0xffffff7f)

06:35:22 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0xfffffffe)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:35:22 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:35:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x48}}, 0x0)

06:35:22 executing program 4:
openat$null(0xffffffffffffff9c, &(0x7f0000003e40), 0x0, 0x0)

06:35:22 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:35:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003540)={&(0x7f0000000e40)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x25, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x2c}}, 0x0)

06:35:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x48}}, 0x0)

06:35:22 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

[  811.455185][T11553] MPTCP: kernel_bind error, err=-98
[  817.794390][T11617] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
06:35:22 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x1000000)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:35:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x48}}, 0x0)

06:35:22 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
ftruncate(0xffffffffffffffff, 0xee72)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
r3 = dup3(r1, r2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040))

06:35:23 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0xfffffffe)

06:35:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000003780)={0x14, r1, 0x1}, 0x14}}, 0x0)

06:35:23 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0xffffffff)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:35:23 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x48, r0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x48}}, 0x0)

06:35:23 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
ftruncate(0xffffffffffffffff, 0xee72)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
r3 = dup3(r1, r2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040))

06:35:23 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x48, r0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x48}}, 0x0)

06:35:23 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
ftruncate(0xffffffffffffffff, 0xee72)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
r3 = dup3(r1, r2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040))

06:35:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000c00), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0)

06:35:23 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x48, r0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x48}}, 0x0)

06:35:25 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0xee72)
sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe)
r2 = fcntl$dupfd(r0, 0x0, r1)
r3 = dup3(0xffffffffffffffff, r2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040))

06:35:25 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xb, 0x2})
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:35:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x0)

06:35:25 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x2000000)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:35:25 executing program 4:
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000280), 0x4)

06:35:25 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0xffffffff)

06:35:26 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x30, r1, 0x1, 0x0, 0x0, {0x2}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x30}}, 0x0)

06:35:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x0)

06:35:26 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0xee72)
sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe)
r2 = fcntl$dupfd(r0, 0x0, r1)
r3 = dup3(0xffffffffffffffff, r2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040))

06:35:26 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x30, r1, 0x1, 0x0, 0x0, {0x2}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x30}}, 0x0)

06:35:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x0)

06:35:26 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0xee72)
sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe)
r2 = fcntl$dupfd(r0, 0x0, r1)
r3 = dup3(0xffffffffffffffff, r2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040))

06:35:26 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, 0x0)

06:35:26 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async, rerun: 32)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32)
mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xb, 0x2})
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0) (async, rerun: 32)
close(r1) (rerun: 32)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:35:29 executing program 0:
r0 = dup(0xffffffffffffffff)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0xee72)
sendfile(r0, r1, 0x0, 0x8000fffffffe)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
r3 = dup3(r0, r2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040))

06:35:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)

06:35:29 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x14be6, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
close(r0)

06:35:29 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x3000000)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:35:29 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xb, 0x2})
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xb, 0x2}) (async)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0) (async)
close(r1) (async)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0) (async)

06:35:29 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = gettid()
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0xb0be}, 0x200, 0x0, 0x6, 0x0, 0x10001, 0x7, 0x1000}, r1, 0x0, r2, 0x1)
timer_create(0x5, &(0x7f0000000180)={0x0, 0xf, 0x0, @tid=r1}, &(0x7f00000001c0))
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:35:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)

06:35:29 executing program 0:
r0 = dup(0xffffffffffffffff)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0xee72)
sendfile(r0, r1, 0x0, 0x8000fffffffe)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
r3 = dup3(r0, r2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040))

06:35:29 executing program 4:
mq_open(&(0x7f0000000340)='&[@*&([+\x00', 0x0, 0x0, 0x0)

[  824.295583][T11684] syz-executor.5: vmalloc error: size 8192, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1
06:35:29 executing program 4:
syz_open_dev$sndctrl(&(0x7f0000000040), 0xc99c, 0x165a01)

06:35:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)

06:35:29 executing program 0:
r0 = dup(0xffffffffffffffff)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0xee72)
sendfile(r0, r1, 0x0, 0x8000fffffffe)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
r3 = dup3(r0, r2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040))

[  824.414830][T11684] CPU: 1 PID: 11684 Comm: syz-executor.5 Not tainted 5.16.0-rc5-syzkaller #0
[  824.423732][T11684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  824.433976][T11684] Call Trace:
[  824.437273][T11684]  <TASK>
[  824.440229][T11684]  dump_stack_lvl+0x201/0x2d8
[  824.444935][T11684]  ? show_regs_print_info+0x12/0x12
[  824.450158][T11684]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  824.455913][T11684]  warn_alloc+0x221/0x370
[  824.460276][T11684]  ? zone_watermark_ok_safe+0x280/0x280
[  824.465939][T11684]  ? alloc_pages+0x44a/0x560
[  824.470568][T11684]  __vmalloc_node_range+0x7c5/0x960
[  824.475804][T11684]  dup_task_struct+0x65d/0x9a0
[  824.480594][T11684]  ? copy_process+0x64d/0x5ca0
[  824.485380][T11684]  ? _raw_spin_unlock_irq+0x1f/0x40
[  824.490603][T11684]  ? lockdep_hardirqs_on+0x95/0x140
[  824.495835][T11684]  copy_process+0x64d/0x5ca0
[  824.500462][T11684]  ? _raw_spin_unlock+0x24/0x40
[  824.505336][T11684]  ? do_anonymous_page+0xe26/0x14f0
06:35:29 executing program 4:
syz_open_dev$sndctrl(&(0x7f0000000040), 0xc99c, 0x165a01)

[  824.510688][T11684]  ? __lock_acquire+0x1382/0x2b00
[  824.515743][T11684]  ? pidfd_show_fdinfo+0x2e0/0x2e0
[  824.520894][T11684]  kernel_clone+0x22a/0x7e0
[  824.525421][T11684]  ? create_io_thread+0x1d0/0x1d0
[  824.530474][T11684]  ? __context_tracking_exit+0x7a/0xd0
[  824.535955][T11684]  __x64_sys_clone+0x245/0x2b0
[  824.540737][T11684]  ? __do_sys_vfork+0x130/0x130
[  824.545599][T11684]  ? lockdep_hardirqs_on_prepare+0x412/0x780
[  824.551609][T11684]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  824.557610][T11684]  ? lockdep_hardirqs_on+0x95/0x140
[  824.562828][T11684]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[  824.568831][T11684]  do_syscall_64+0x44/0xd0
[  824.573271][T11684]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  824.579183][T11684] RIP: 0033:0x7f82ce4962c1
[  824.583617][T11684] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00
[  824.603276][T11684] RSP: 002b:00007ffe05db4df8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
06:35:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0)

06:35:29 executing program 4:
syz_open_dev$sndctrl(&(0x7f0000000040), 0xc99c, 0x165a01)

[  824.611707][T11684] RAX: ffffffffffffffda RBX: 00007f82ccd23700 RCX: 00007f82ce4962c1
[  824.619702][T11684] RDX: 00007f82ccd239d0 RSI: 00007f82ccd232f0 RDI: 00000000003d0f00
[  824.627775][T11684] RBP: 00007ffe05db5040 R08: 00007f82ccd23700 R09: 00007f82ccd23700
[  824.635764][T11684] R10: 00007f82ccd239d0 R11: 0000000000000206 R12: 00007ffe05db4eae
[  824.643752][T11684] R13: 00007ffe05db4eaf R14: 00007f82ccd23300 R15: 0000000000022000
[  824.651770][T11684]  </TASK>
[  824.699026][T11684] Mem-Info:
[  824.702195][T11684] active_anon:417 inactive_anon:149198 isolated_anon:0
[  824.702195][T11684]  active_file:5197 inactive_file:68501 isolated_file:0
[  824.702195][T11684]  unevictable:768 dirty:32 writeback:0
[  824.702195][T11684]  slab_reclaimable:18993 slab_unreclaimable:96654
[  824.702195][T11684]  mapped:27524 shmem:1797 pagetables:1183 bounce:0
[  824.702195][T11684]  kernel_misc_reclaimable:0
[  824.702195][T11684]  free:1258003 free_pcp:11080 free_cma:0
[  824.812995][T11684] Node 0 active_anon:1664kB inactive_anon:596032kB active_file:20716kB inactive_file:274004kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110096kB dirty:124kB writeback:0kB shmem:4924kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 284672kB writeback_tmp:0kB kernel_stack:9848kB pagetables:4628kB all_unreclaimable? no
[  824.846468][T11684] Node 1 active_anon:4kB inactive_anon:724kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2264kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no
[  824.875998][T11684] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  824.909178][T11684] lowmem_reserve[]: 0 2635 2636 2636 2636
[  824.922022][T11684] Node 0 DMA32 free:1070916kB boost:0kB min:35588kB low:44484kB high:53380kB reserved_highatomic:0KB active_anon:1664kB inactive_anon:596032kB active_file:20716kB inactive_file:274004kB unevictable:1536kB writepending:124kB present:3129332kB managed:2705616kB mlocked:0kB bounce:0kB free_pcp:39128kB local_pcp:19636kB free_cma:0kB
[  824.956566][T11684] lowmem_reserve[]: 0 0 1 1 1
[  824.961524][T11684] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  824.988689][T11684] lowmem_reserve[]: 0 0 0 0 0
[  824.993657][T11684] Node 1 Normal free:3947992kB boost:0kB min:54300kB low:67872kB high:81444kB reserved_highatomic:0KB active_anon:4kB inactive_anon:724kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:3544kB local_pcp:3544kB free_cma:0kB
[  825.024861][T11684] lowmem_reserve[]: 0 0 0 0 0
[  825.038685][T11684] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  825.052356][T11684] Node 0 DMA32: 2369*4kB (UM) 528*8kB (UME) 362*16kB (UME) 573*32kB (UME) 254*64kB (UME) 58*128kB (UME) 15*256kB (UME) 4*512kB (UE) 2*1024kB (UM) 1*2048kB (M) 244*4096kB (UM) = 1070916kB
[  825.071282][T11684] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  825.084839][T11684] Node 1 Normal: 84*4kB (UE) 21*8kB (UME) 20*16kB (UME) 181*32kB (UE) 60*64kB (UE) 32*128kB (UME) 11*256kB (UM) 1*512kB (U) 0*1024kB 1*2048kB (E) 959*4096kB (UM) = 3947992kB
[  825.102900][T11684] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  825.112647][T11684] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  825.122046][T11684] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  825.132425][T11684] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  825.142161][T11684] 14709 total pagecache pages
[  825.149195][T11684] 0 pages in swap cache
[  825.153477][T11684] Swap cache stats: add 0, delete 0, find 0/0
[  825.159586][T11684] Free swap  = 0kB
[  825.163312][T11684] Total swap = 0kB
[  825.167196][T11684] 2097051 pages RAM
[  825.171118][T11684] 0 pages HighMem/MovableOnly
[  825.175896][T11684] 387046 pages reserved
[  825.180113][T11684] 0 pages cma reserved
06:35:32 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x4000000)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:35:32 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:35:32 executing program 4:
syz_open_dev$sndctrl(&(0x7f0000000040), 0xc99c, 0x165a01)

06:35:32 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0)

06:35:32 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async)
r1 = gettid() (async)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0xb0be}, 0x200, 0x0, 0x6, 0x0, 0x10001, 0x7, 0x1000}, r1, 0x0, r2, 0x1)
timer_create(0x5, &(0x7f0000000180)={0x0, 0xf, 0x0, @tid=r1}, &(0x7f00000001c0)) (async)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:35:32 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f0000000500), 0x0, 0x4010, &(0x7f0000000540)={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5c, 0x0, 0x0, 0xb3550aa4ba878254}, 0x9c)
preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/34, 0x22}, {&(0x7f0000000400)=""/245, 0xf5}, {&(0x7f0000000240)=""/152, 0x98}], 0x3, 0x3, 0xfffffbff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:35:32 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0)

06:35:32 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:35:32 executing program 4:
syz_open_dev$sndctrl(0x0, 0xc99c, 0x165a01)

06:35:32 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x48, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x48}}, 0x0)

06:35:32 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:35:32 executing program 4:
syz_open_dev$sndctrl(0x0, 0xc99c, 0x165a01)

06:35:35 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x5000000)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:35:35 executing program 4:
syz_open_dev$sndctrl(0x0, 0xc99c, 0x165a01)

06:35:35 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x48, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x48}}, 0x0)

06:35:35 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:35:35 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async)
r1 = gettid()
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0xb0be}, 0x200, 0x0, 0x6, 0x0, 0x10001, 0x7, 0x1000}, r1, 0x0, r2, 0x1) (async)
timer_create(0x5, &(0x7f0000000180)={0x0, 0xf, 0x0, @tid=r1}, &(0x7f00000001c0))
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:35:35 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f0000000500), 0x0, 0x4010, &(0x7f0000000540)={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5c, 0x0, 0x0, 0xb3550aa4ba878254}, 0x9c)
preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/34, 0x22}, {&(0x7f0000000400)=""/245, 0xf5}, {&(0x7f0000000240)=""/152, 0x98}], 0x3, 0x3, 0xfffffbff)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
socket$inet6(0xa, 0x1, 0x8010000000000084) (async)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) (async)
sendto$inet6(r0, &(0x7f0000000500), 0x0, 0x4010, &(0x7f0000000540)={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}, 0x6}, 0x1c) (async)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5c, 0x0, 0x0, 0xb3550aa4ba878254}, 0x9c) (async)
preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/34, 0x22}, {&(0x7f0000000400)=""/245, 0xf5}, {&(0x7f0000000240)=""/152, 0x98}], 0x3, 0x3, 0xfffffbff) (async)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0) (async)
close(r2) (async)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0) (async)

06:35:35 executing program 4:
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x165a01)

06:35:35 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x48, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x48}}, 0x0)

06:35:35 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:35:35 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x48, r1, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x48}}, 0x0)

06:35:35 executing program 4:
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x165a01)

06:35:35 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:35:38 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x6000000)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:35:38 executing program 4:
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x165a01)

06:35:38 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x48, r1, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x48}}, 0x0)

06:35:38 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(0xffffffffffffffff)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:35:38 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) (async)
sendto$inet6(r0, &(0x7f0000000500), 0x0, 0x4010, &(0x7f0000000540)={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}, 0x6}, 0x1c) (async)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5c, 0x0, 0x0, 0xb3550aa4ba878254}, 0x9c) (async, rerun: 64)
preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/34, 0x22}, {&(0x7f0000000400)=""/245, 0xf5}, {&(0x7f0000000240)=""/152, 0x98}], 0x3, 0x3, 0xfffffbff) (rerun: 64)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) (async, rerun: 32)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async, rerun: 32)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r2) (async)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:35:38 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=<r0=>0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_gettime(r0, &(0x7f00000002c0))
timer_settime(r0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x989680}}, &(0x7f00000001c0))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x5, &(0x7f0000000240)={0x0, 0x0, 0x2}, &(0x7f0000000280))
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
timer_settime(r0, 0x0, &(0x7f0000000400), &(0x7f0000000440))
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:35:38 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x48, r1, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x48}}, 0x0)

06:35:38 executing program 4:
syz_open_dev$sndctrl(&(0x7f0000000040), 0xc99c, 0x0)

06:35:38 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(0xffffffffffffffff)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:35:38 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0)

06:35:38 executing program 4:
syz_open_dev$sndctrl(&(0x7f0000000040), 0xc99c, 0x0)

06:35:38 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(0xffffffffffffffff)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:35:41 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x7000000)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:35:41 executing program 4:
syz_open_dev$sndctrl(&(0x7f0000000040), 0xc99c, 0x0)

06:35:41 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0)

06:35:41 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(0x0, 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:35:41 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
r2 = getpid()
perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x2}, r2, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, r2, 0x4, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x9b, 0x4, 0x6, 0x38, 0x0, 0x80000001, 0x8000, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f00000000c0), 0x4}, 0x1208, 0xa1b5, 0x3, 0x2, 0x1, 0x0, 0x362, 0x0, 0x1, 0x0, 0x7}, r2, 0x0, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0x5, 0x4, 0x3f, 0x9, 0x0, 0x0, 0x10000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x4, 0x3}, 0x10861, 0x9, 0x1fd, 0x7, 0xfffffffffffffffa, 0x0, 0x4e, 0x0, 0x3, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1b)
timer_create(0x6, &(0x7f0000000180)={0x0, 0x2a, 0x2, @tid=r2}, &(0x7f00000001c0))
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:35:41 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=<r0=>0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async)
timer_gettime(r0, &(0x7f00000002c0))
timer_settime(r0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x989680}}, &(0x7f00000001c0)) (async)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async, rerun: 64)
timer_create(0x5, &(0x7f0000000240)={0x0, 0x0, 0x2}, &(0x7f0000000280)) (async, rerun: 64)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
timer_settime(r0, 0x0, &(0x7f0000000400), &(0x7f0000000440)) (async)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:35:41 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0)

06:35:41 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(0x0, 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:35:41 executing program 4:
r0 = socket$inet(0x2, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x10, 0x2}, 0x10)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f00000003c0)={0x0, 0x1}, 0x8)

06:35:41 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x40}}, 0x0)

06:35:41 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ed075140"}, 0x0, 0x1, @userptr})

06:35:41 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(0x0, 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:35:41 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0xe000000)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:35:41 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x38}}, 0x0)

06:35:42 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x14, r1, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0)

06:35:42 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:35:42 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
r2 = getpid()
perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x2}, r2, 0x0, 0xffffffffffffffff, 0x0) (async)
perf_event_open(0x0, r2, 0x4, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x9b, 0x4, 0x6, 0x38, 0x0, 0x80000001, 0x8000, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f00000000c0), 0x4}, 0x1208, 0xa1b5, 0x3, 0x2, 0x1, 0x0, 0x362, 0x0, 0x1, 0x0, 0x7}, r2, 0x0, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0x5, 0x4, 0x3f, 0x9, 0x0, 0x0, 0x10000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x4, 0x3}, 0x10861, 0x9, 0x1fd, 0x7, 0xfffffffffffffffa, 0x0, 0x4e, 0x0, 0x3, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1b)
timer_create(0x6, &(0x7f0000000180)={0x0, 0x2a, 0x2, @tid=r2}, &(0x7f00000001c0)) (async)
close(r1) (async)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:35:44 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=<r0=>0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_gettime(r0, &(0x7f00000002c0)) (async)
timer_settime(r0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x989680}}, &(0x7f00000001c0)) (async)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async)
timer_create(0x5, &(0x7f0000000240)={0x0, 0x0, 0x2}, &(0x7f0000000280)) (async)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
timer_settime(r0, 0x0, &(0x7f0000000400), &(0x7f0000000440))
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:35:44 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x38}}, 0x0)

06:35:44 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0})

06:35:44 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:35:44 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
r2 = getpid()
perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x2}, r2, 0x0, 0xffffffffffffffff, 0x0) (async)
perf_event_open(0x0, r2, 0x4, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x9b, 0x4, 0x6, 0x38, 0x0, 0x80000001, 0x8000, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f00000000c0), 0x4}, 0x1208, 0xa1b5, 0x3, 0x2, 0x1, 0x0, 0x362, 0x0, 0x1, 0x0, 0x7}, r2, 0x0, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0x5, 0x4, 0x3f, 0x9, 0x0, 0x0, 0x10000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x4, 0x3}, 0x10861, 0x9, 0x1fd, 0x7, 0xfffffffffffffffa, 0x0, 0x4e, 0x0, 0x3, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1b) (async)
timer_create(0x6, &(0x7f0000000180)={0x0, 0x2a, 0x2, @tid=r2}, &(0x7f00000001c0)) (async, rerun: 32)
close(r1) (async, rerun: 32)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:35:44 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:35:44 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x38}}, 0x0)

[  837.034382][T11841] MPTCP: kernel_bind error, err=-98
[  839.815539][T11865] binder: 11863:11865 ioctl c0306201 200001c0 returned -14
06:35:45 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0xfeffffff)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:35:45 executing program 4:
socketpair(0x11, 0x2, 0x0, &(0x7f00000003c0))

06:35:45 executing program 3:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280), 0x4)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=<r0=>0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x7, &(0x7f00000002c0)={0x0, 0x2c, 0x4, @thr={&(0x7f0000000400)="c13552307835da006bf355cff86387e3b288991676eb80e77d54cbe9b82ab0b402566bcd3008e2e578736f2020fe588553292b930cd9c0f7b29a89801d7c38b3b9190811c95f8d1483395240d061c3f9885765184737e1b870579455552e6bcd79cea91a06247346fda3e8a9e98c690ff4de1408c21b9d", &(0x7f0000000480)="c14d7f0121a311da374fe596dc7cf57d69e1c6e563b3bae11d8e542d75c427a81ff1da16f7ce80a8367db5dbf780999a99420d8d169f78fb20c64b047022289e2a595f13cbc602db842ac476988fd852012726b41c8896ff9e116ffe6b7bd5c6ad6771f5c3d51c82a80707dccf605fe0d77dd8ce4f3e046c57ab93d56662b25f854c06e1741ae8cede31ae"}}, &(0x7f0000000540))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r3=>0x0, <r4=>0x0})
timer_settime(r0, 0x0, &(0x7f00000001c0)={{r3, r4+60000000}, {0x77359400}}, &(0x7f0000000580))
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:35:45 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(0xffffffffffffffff, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:35:45 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x40}}, 0x0)

06:35:45 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xd, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x6, 0x0, &(0x7f0000000500), 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x3, 0x400}, 0x10}, 0x78)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x200}, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgid(0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mknod(&(0x7f0000000200)='./file0\x00', 0xc000, 0x3f)
sendfile(r0, r2, 0x0, 0x8000000a)

06:35:45 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x40}}, 0x0)

06:35:45 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(0xffffffffffffffff, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

[  840.278485][T11893] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  840.300872][T11893] loop4: detected capacity change from 0 to 262160
[  840.313013][   T26] audit: type=1800 audit(1639463745.251:7): pid=11893 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1177 res=0 errno=0
06:35:45 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x40}}, 0x0)

06:35:45 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
timer_create(0x0, &(0x7f0000000200)={0x0, 0x8, 0x0, @thr={&(0x7f0000000580)="7e70aa5e7daa80f5dc55f3c83976177b8f9ad13ba0b63a24707e79fbd611c9475790ea5dbe1a8cea77221fa40ddb941a63795b0e388eda5b235cb5d0113d4e9776a07a1b9d66500ea7c858b26af7869e99f557cb8626df1eca356f1eeb733e65f010e4297f41c91c2d4840c95c42c1bf0ef3db91c32a8ad4944754386c4bc62dfc315c263631b8bf9e08ef7337115623c071c2cc9a5d93f115093d1db8a740f213bae173c5acd70c5bfec3293fd0686648e7580dde209d9ed6f9db9023e585ee9668c54dd002", &(0x7f00000004c0)="42ab22d80972e519edf83a84ec4d27de21fb42d55c3cda3f6c777ce8477dfc18a358e5afa8750b52da4fd50a4bfcfa9c933b3f20e9a7172ca57b45a49a0c4c5b9f535ec1c67d80f22213c63b798da220c270aef88c96b5430351db11b6b676eca166d00fd2b2d940f6c60105ca252b3d087cbebef752c641647190199842f5ff40e9f1435d0612208ed0e8ced46d8c67b2244a587f1c97bfd3f95efa58f761484443e3f823b5d299a231e4e92a299b97eabad2ded7e17da053b6ad95"}}, &(0x7f0000000240))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x1d, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x6, &(0x7f0000000180)={0x0, 0x12, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000001c0))
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:35:45 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(0xffffffffffffffff, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:35:45 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x38}}, 0x0)

06:35:48 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0xfffffffe)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:35:48 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
timer_create(0x0, &(0x7f0000000200)={0x0, 0x8, 0x0, @thr={&(0x7f0000000580)="7e70aa5e7daa80f5dc55f3c83976177b8f9ad13ba0b63a24707e79fbd611c9475790ea5dbe1a8cea77221fa40ddb941a63795b0e388eda5b235cb5d0113d4e9776a07a1b9d66500ea7c858b26af7869e99f557cb8626df1eca356f1eeb733e65f010e4297f41c91c2d4840c95c42c1bf0ef3db91c32a8ad4944754386c4bc62dfc315c263631b8bf9e08ef7337115623c071c2cc9a5d93f115093d1db8a740f213bae173c5acd70c5bfec3293fd0686648e7580dde209d9ed6f9db9023e585ee9668c54dd002", &(0x7f00000004c0)="42ab22d80972e519edf83a84ec4d27de21fb42d55c3cda3f6c777ce8477dfc18a358e5afa8750b52da4fd50a4bfcfa9c933b3f20e9a7172ca57b45a49a0c4c5b9f535ec1c67d80f22213c63b798da220c270aef88c96b5430351db11b6b676eca166d00fd2b2d940f6c60105ca252b3d087cbebef752c641647190199842f5ff40e9f1435d0612208ed0e8ced46d8c67b2244a587f1c97bfd3f95efa58f761484443e3f823b5d299a231e4e92a299b97eabad2ded7e17da053b6ad95"}}, &(0x7f0000000240))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x1d, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x6, &(0x7f0000000180)={0x0, 0x12, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000001c0))
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
getpid() (async)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x8, 0x0, @thr={&(0x7f0000000580)="7e70aa5e7daa80f5dc55f3c83976177b8f9ad13ba0b63a24707e79fbd611c9475790ea5dbe1a8cea77221fa40ddb941a63795b0e388eda5b235cb5d0113d4e9776a07a1b9d66500ea7c858b26af7869e99f557cb8626df1eca356f1eeb733e65f010e4297f41c91c2d4840c95c42c1bf0ef3db91c32a8ad4944754386c4bc62dfc315c263631b8bf9e08ef7337115623c071c2cc9a5d93f115093d1db8a740f213bae173c5acd70c5bfec3293fd0686648e7580dde209d9ed6f9db9023e585ee9668c54dd002", &(0x7f00000004c0)="42ab22d80972e519edf83a84ec4d27de21fb42d55c3cda3f6c777ce8477dfc18a358e5afa8750b52da4fd50a4bfcfa9c933b3f20e9a7172ca57b45a49a0c4c5b9f535ec1c67d80f22213c63b798da220c270aef88c96b5430351db11b6b676eca166d00fd2b2d940f6c60105ca252b3d087cbebef752c641647190199842f5ff40e9f1435d0612208ed0e8ced46d8c67b2244a587f1c97bfd3f95efa58f761484443e3f823b5d299a231e4e92a299b97eabad2ded7e17da053b6ad95"}}, &(0x7f0000000240)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x1d, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) (async)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async)
timer_create(0x6, &(0x7f0000000180)={0x0, 0x12, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) (async)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0) (async)
close(r1) (async)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0) (async)

06:35:48 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:35:48 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x38}}, 0x0)

06:35:48 executing program 4:
syz_mount_image$erofs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

06:35:48 executing program 3:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280), 0x4) (async)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=<r0=>0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async)
timer_create(0x7, &(0x7f00000002c0)={0x0, 0x2c, 0x4, @thr={&(0x7f0000000400)="c13552307835da006bf355cff86387e3b288991676eb80e77d54cbe9b82ab0b402566bcd3008e2e578736f2020fe588553292b930cd9c0f7b29a89801d7c38b3b9190811c95f8d1483395240d061c3f9885765184737e1b870579455552e6bcd79cea91a06247346fda3e8a9e98c690ff4de1408c21b9d", &(0x7f0000000480)="c14d7f0121a311da374fe596dc7cf57d69e1c6e563b3bae11d8e542d75c427a81ff1da16f7ce80a8367db5dbf780999a99420d8d169f78fb20c64b047022289e2a595f13cbc602db842ac476988fd852012726b41c8896ff9e116ffe6b7bd5c6ad6771f5c3d51c82a80707dccf605fe0d77dd8ce4f3e046c57ab93d56662b25f854c06e1741ae8cede31ae"}}, &(0x7f0000000540))
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32)
clock_gettime(0x0, &(0x7f0000000180)={<r3=>0x0, <r4=>0x0}) (rerun: 32)
timer_settime(r0, 0x0, &(0x7f00000001c0)={{r3, r4+60000000}, {0x77359400}}, &(0x7f0000000580)) (async, rerun: 32)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0) (rerun: 32)

06:35:48 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:35:48 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
getpid()
timer_create(0x0, &(0x7f0000000200)={0x0, 0x8, 0x0, @thr={&(0x7f0000000580)="7e70aa5e7daa80f5dc55f3c83976177b8f9ad13ba0b63a24707e79fbd611c9475790ea5dbe1a8cea77221fa40ddb941a63795b0e388eda5b235cb5d0113d4e9776a07a1b9d66500ea7c858b26af7869e99f557cb8626df1eca356f1eeb733e65f010e4297f41c91c2d4840c95c42c1bf0ef3db91c32a8ad4944754386c4bc62dfc315c263631b8bf9e08ef7337115623c071c2cc9a5d93f115093d1db8a740f213bae173c5acd70c5bfec3293fd0686648e7580dde209d9ed6f9db9023e585ee9668c54dd002", &(0x7f00000004c0)="42ab22d80972e519edf83a84ec4d27de21fb42d55c3cda3f6c777ce8477dfc18a358e5afa8750b52da4fd50a4bfcfa9c933b3f20e9a7172ca57b45a49a0c4c5b9f535ec1c67d80f22213c63b798da220c270aef88c96b5430351db11b6b676eca166d00fd2b2d940f6c60105ca252b3d087cbebef752c641647190199842f5ff40e9f1435d0612208ed0e8ced46d8c67b2244a587f1c97bfd3f95efa58f761484443e3f823b5d299a231e4e92a299b97eabad2ded7e17da053b6ad95"}}, &(0x7f0000000240)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x1d, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async)
timer_create(0x6, &(0x7f0000000180)={0x0, 0x12, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) (async)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:35:48 executing program 4:
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000580)='./bus\x00', 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.'])
chdir(&(0x7f00000001c0)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0)
fsync(r0)

06:35:48 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x38}}, 0x0)

06:35:48 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000280)={<r4=>0x0, <r5=>0x0})
timer_settime(r0, 0x1, &(0x7f00000002c0)={{r2, r3+10000000}, {r4, r5+10000000}}, &(0x7f0000000400))
r6 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5c, 0x0, 0x0, 0xb3550aa4ba878254}, 0x9c)
read(r6, &(0x7f0000000180)=""/76, 0x4c)

06:35:48 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

[  843.559381][T11928] overlayfs: conflicting lowerdir path
06:35:51 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0xffffffff)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)

06:35:51 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(0xffffffffffffffff, r2, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:35:51 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x40}}, 0x0)

06:35:51 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x9)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x32, 0x0, 0x0)

06:35:51 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0) (async)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0) (async)
clock_gettime(0x0, &(0x7f0000000240)={<r2=>0x0, <r3=>0x0}) (async)
clock_gettime(0x0, &(0x7f0000000280)={<r4=>0x0, <r5=>0x0})
timer_settime(r0, 0x1, &(0x7f00000002c0)={{r2, r3+10000000}, {r4, r5+10000000}}, &(0x7f0000000400))
r6 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) (async)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5c, 0x0, 0x0, 0xb3550aa4ba878254}, 0x9c) (async)
read(r6, &(0x7f0000000180)=""/76, 0x4c)

06:35:51 executing program 3:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280), 0x4) (async)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=<r0=>0x0) (async)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async)
timer_create(0x7, &(0x7f00000002c0)={0x0, 0x2c, 0x4, @thr={&(0x7f0000000400)="c13552307835da006bf355cff86387e3b288991676eb80e77d54cbe9b82ab0b402566bcd3008e2e578736f2020fe588553292b930cd9c0f7b29a89801d7c38b3b9190811c95f8d1483395240d061c3f9885765184737e1b870579455552e6bcd79cea91a06247346fda3e8a9e98c690ff4de1408c21b9d", &(0x7f0000000480)="c14d7f0121a311da374fe596dc7cf57d69e1c6e563b3bae11d8e542d75c427a81ff1da16f7ce80a8367db5dbf780999a99420d8d169f78fb20c64b047022289e2a595f13cbc602db842ac476988fd852012726b41c8896ff9e116ffe6b7bd5c6ad6771f5c3d51c82a80707dccf605fe0d77dd8ce4f3e046c57ab93d56662b25f854c06e1741ae8cede31ae"}}, &(0x7f0000000540)) (async)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r3=>0x0, <r4=>0x0})
timer_settime(r0, 0x0, &(0x7f00000001c0)={{r3, r4+60000000}, {0x77359400}}, &(0x7f0000000580)) (async)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)

06:35:51 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(0xffffffffffffffff, r2, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:35:51 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x40}}, 0x0)

06:35:51 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x7, 0x3, 0x3, 0x0, 0x1}, 0x40)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5450, 0x0)

06:35:51 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0) (async)
close(r1) (async)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000280)={<r4=>0x0, <r5=>0x0})
timer_settime(r0, 0x1, &(0x7f00000002c0)={{r2, r3+10000000}, {r4, r5+10000000}}, &(0x7f0000000400))
r6 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5c, 0x0, 0x0, 0xb3550aa4ba878254}, 0x9c)
read(r6, &(0x7f0000000180)=""/76, 0x4c)

06:35:51 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x40}}, 0x0)

06:35:51 executing program 4:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r0, 0x800002, 0x0)
perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket(0x1e, 0x4, 0x0)
connect$tipc(r2, &(0x7f0000000000)=@id, 0x10)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x200fc0)

[  846.707306][   T26] audit: type=1804 audit(1639463751.651:8): pid=11973 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir354257352/syzkaller.oqQVir/540/bus" dev="sda1" ino=1179 res=1 errno=0
06:35:54 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x38}}, 0x0)

06:35:54 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(0xffffffffffffffff, r2, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:35:54 executing program 4:
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x80000000}, 0x8)

06:35:54 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=<r0=>0x0)
timer_gettime(r0, &(0x7f0000000480))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
r3 = getpid()
perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x2}, r3, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, r3, 0x4, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x9b, 0x4, 0x6, 0x38, 0x0, 0x80000001, 0x8000, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f00000000c0), 0x4}, 0x1208, 0xa1b5, 0x3, 0x2, 0x1, 0x0, 0x362, 0x0, 0x1, 0x0, 0x7}, r3, 0x0, 0xffffffffffffffff, 0xa)
timer_create(0x1, &(0x7f0000000400)={0x0, 0x4, 0x4, @tid=r3}, &(0x7f0000000440))
perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0x5, 0x4, 0x3f, 0x9, 0x0, 0x0, 0x10000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x4, 0x3}, 0x10861, 0x9, 0x1fd, 0x7, 0xfffffffffffffffa, 0x0, 0x4e, 0x0, 0x3, 0x0, 0x1ff}, r3, 0xe, 0xffffffffffffffff, 0x1b)
timer_create(0x3, &(0x7f0000000180)={0x0, 0x41, 0x4, @tid=r3}, &(0x7f00000001c0))

06:35:54 executing program 1:
r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f0000000300)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={<r4=>r3, 0x5, 0x1, 0x20})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r4, {0xee00}}, './file0\x00'})
socket$key(0xf, 0x3, 0x2)
r5 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x9d7f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000000}, 0x1c)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000400)={'ip6tnl0\x00', {0x2, 0x0, @initdev}})
preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x0, 0x0, 0x0)
close(r3)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)
ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000063000000139b9ea5a6ca946c78c38224f1d58ca5ff2e68099dafec1b5ab884ac58b3b9a332e6f2bc04cfa9cb1cf7be7215ccf4fc355cfcc423809ac889355ca837cabf49b07eea7be3e976f5266893b803497ff3afedb1cfaca5298c78c40dd20fec2fbf86bb89"])

06:35:54 executing program 4:
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0xc, 0x2)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000080)={0x0, 0x1, [{}]})

06:35:54 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x38}}, 0x0)

06:35:54 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:35:54 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r1=>0x0, <r2=>0x0})
timer_settime(r0, 0x1, &(0x7f00000001c0)={{0x77359400}, {r1, r2+10000000}}, &(0x7f0000000240))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r4)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:35:54 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0)
pipe(0x0)
dup3(r3, r3, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x100000], 0x5000, 0x30010})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

06:35:54 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x38}}, 0x0)

06:35:54 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:35:54 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x38}}, 0x0)

06:35:54 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:35:54 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r1=>0x0, <r2=>0x0})
timer_settime(r0, 0x1, &(0x7f00000001c0)={{0x77359400}, {r1, r2+10000000}}, &(0x7f0000000240)) (async, rerun: 32)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async, rerun: 32)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r4)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

[  849.526625][T11979] MPTCP: kernel_bind error, err=-98
[  849.992674][T11998] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
06:35:55 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=<r0=>0x0)
timer_gettime(r0, &(0x7f0000000480)) (async, rerun: 64)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (rerun: 64)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
r3 = getpid()
perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x2}, r3, 0x0, 0xffffffffffffffff, 0x0) (async)
perf_event_open(0x0, r3, 0x4, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x9b, 0x4, 0x6, 0x38, 0x0, 0x80000001, 0x8000, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f00000000c0), 0x4}, 0x1208, 0xa1b5, 0x3, 0x2, 0x1, 0x0, 0x362, 0x0, 0x1, 0x0, 0x7}, r3, 0x0, 0xffffffffffffffff, 0xa)
timer_create(0x1, &(0x7f0000000400)={0x0, 0x4, 0x4, @tid=r3}, &(0x7f0000000440))
perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0x5, 0x4, 0x3f, 0x9, 0x0, 0x0, 0x10000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x4, 0x3}, 0x10861, 0x9, 0x1fd, 0x7, 0xfffffffffffffffa, 0x0, 0x4e, 0x0, 0x3, 0x0, 0x1ff}, r3, 0xe, 0xffffffffffffffff, 0x1b)
timer_create(0x3, &(0x7f0000000180)={0x0, 0x41, 0x4, @tid=r3}, &(0x7f00000001c0))

06:35:57 executing program 1:
r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0) (async)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) (async)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f0000000300)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={<r4=>r3, 0x5, 0x1, 0x20})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r4, {0xee00}}, './file0\x00'}) (async)
socket$key(0xf, 0x3, 0x2)
r5 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x9d7f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000000}, 0x1c)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000400)={'ip6tnl0\x00', {0x2, 0x0, @initdev}}) (async)
preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x0, 0x0, 0x0) (async)
close(r3) (async)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0) (async)
ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000063000000139b9ea5a6ca946c78c38224f1d58ca5ff2e68099dafec1b5ab884ac58b3b9a332e6f2bc04cfa9cb1cf7be7215ccf4fc355cfcc423809ac889355ca837cabf49b07eea7be3e976f5266893b803497ff3afedb1cfaca5298c78c40dd20fec2fbf86bb89"])

06:35:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x30}}, 0x0)

06:35:57 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x0)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:35:57 executing program 4:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f00000000c0))
clock_gettime(0x0, &(0x7f00000001c0)={<r0=>0x0})
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x14}, &(0x7f0000000040)=<r1=>0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmmsg(r2, &(0x7f0000004440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
timer_settime(r1, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:35:57 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r1=>0x0, <r2=>0x0})
timer_settime(r0, 0x1, &(0x7f00000001c0)={{0x77359400}, {r1, r2+10000000}}, &(0x7f0000000240))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0) (async)
close(r4)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:35:57 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=<r0=>0x0)
timer_gettime(r0, &(0x7f0000000480)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0) (async)
r3 = getpid()
perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x2}, r3, 0x0, 0xffffffffffffffff, 0x0) (async)
perf_event_open(0x0, r3, 0x4, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x9b, 0x4, 0x6, 0x38, 0x0, 0x80000001, 0x8000, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f00000000c0), 0x4}, 0x1208, 0xa1b5, 0x3, 0x2, 0x1, 0x0, 0x362, 0x0, 0x1, 0x0, 0x7}, r3, 0x0, 0xffffffffffffffff, 0xa)
timer_create(0x1, &(0x7f0000000400)={0x0, 0x4, 0x4, @tid=r3}, &(0x7f0000000440)) (async)
perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0x5, 0x4, 0x3f, 0x9, 0x0, 0x0, 0x10000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x4, 0x3}, 0x10861, 0x9, 0x1fd, 0x7, 0xfffffffffffffffa, 0x0, 0x4e, 0x0, 0x3, 0x0, 0x1ff}, r3, 0xe, 0xffffffffffffffff, 0x1b) (async)
timer_create(0x3, &(0x7f0000000180)={0x0, 0x41, 0x4, @tid=r3}, &(0x7f00000001c0))

06:35:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x30}}, 0x0)

06:35:57 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x0)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:35:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x30}}, 0x0)

06:35:57 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x0)
r3 = fcntl$dupfd(r0, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:35:57 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=<r0=>0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x2, &(0x7f00000003c0)={0x0, 0x14, 0x2, @thr={&(0x7f0000000500)="ad7102320699900abab5d04f3bd52381196f5f42b55194ad0b552290a7da4d6e511ea45036ddc1d91a8820267ef5de632c420c269011017f2fe857d991001676112b0b2f07b7d1a84c103df8817ae9e18f1665007dbf248586cd5d5fffe53b06", &(0x7f0000000580)="042264a13bb44104324b43ec6761543bfbd9c3c635729db949bcc10ed57a04a88b3601e8865ba3866620f9ea058bd84c03a0ad6ffc2b95a5a34976984ae28d487daadeb8534df48ec434548c6b9adcb2416c0d0b8a6eeff1d7f2441d11e782639244fc0b1fd1370b13489227ef389eea230dde246df754ffb457f124e66286307d4ef798c548766008f5819ad6bddd16e5f053c578"}}, &(0x7f0000000100)=<r1=>0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000001c0)={{r2, r3+60000000}, {0x0, 0x989680}}, &(0x7f0000000240))
clock_gettime(0x0, &(0x7f0000000280)={<r4=>0x0, <r5=>0x0})
clock_gettime(0x0, &(0x7f00000002c0)={<r6=>0x0, <r7=>0x0})
timer_settime(r0, 0x0, &(0x7f0000000340)={{r4, r5+60000000}, {r6, r7+10000000}}, &(0x7f0000000380))
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/205, 0xcd}], 0x1, 0x0, 0x0)
close(r8)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:35:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x30}}, 0x0)

06:36:00 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x30}}, 0x0)

06:36:00 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:36:00 executing program 1:
r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
writev(0xffffffffffffffff, 0x0, 0x0) (async)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) (async)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f0000000300)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={<r4=>r3, 0x5, 0x1, 0x20})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r4, {0xee00}}, './file0\x00'})
socket$key(0xf, 0x3, 0x2) (async)
r5 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x9d7f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000000}, 0x1c) (async)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) (async)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000400)={'ip6tnl0\x00', {0x2, 0x0, @initdev}})
preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x0, 0x0, 0x0) (async)
close(r3) (async)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0) (async)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0) (async)
ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000063000000139b9ea5a6ca946c78c38224f1d58ca5ff2e68099dafec1b5ab884ac58b3b9a332e6f2bc04cfa9cb1cf7be7215ccf4fc355cfcc423809ac889355ca837cabf49b07eea7be3e976f5266893b803497ff3afedb1cfaca5298c78c40dd20fec2fbf86bb89"])

06:36:00 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=<r0=>0x0) (async)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async)
timer_create(0x2, &(0x7f00000003c0)={0x0, 0x14, 0x2, @thr={&(0x7f0000000500)="ad7102320699900abab5d04f3bd52381196f5f42b55194ad0b552290a7da4d6e511ea45036ddc1d91a8820267ef5de632c420c269011017f2fe857d991001676112b0b2f07b7d1a84c103df8817ae9e18f1665007dbf248586cd5d5fffe53b06", &(0x7f0000000580)="042264a13bb44104324b43ec6761543bfbd9c3c635729db949bcc10ed57a04a88b3601e8865ba3866620f9ea058bd84c03a0ad6ffc2b95a5a34976984ae28d487daadeb8534df48ec434548c6b9adcb2416c0d0b8a6eeff1d7f2441d11e782639244fc0b1fd1370b13489227ef389eea230dde246df754ffb457f124e66286307d4ef798c548766008f5819ad6bddd16e5f053c578"}}, &(0x7f0000000100)=<r1=>0x0) (async)
clock_gettime(0x0, &(0x7f0000000180)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000001c0)={{r2, r3+60000000}, {0x0, 0x989680}}, &(0x7f0000000240)) (async)
clock_gettime(0x0, &(0x7f0000000280)={<r4=>0x0, <r5=>0x0}) (async)
clock_gettime(0x0, &(0x7f00000002c0)={<r6=>0x0, <r7=>0x0})
timer_settime(r0, 0x0, &(0x7f0000000340)={{r4, r5+60000000}, {r6, r7+10000000}}, &(0x7f0000000380))
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/205, 0xcd}], 0x1, 0x0, 0x0) (async)
close(r8)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:36:00 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x7, 0x3, 0x3, 0x0, 0x1}, 0x40)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5421, 0x0)

06:36:00 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={<r2=>r1, 0x0, 0x7ff, 0x661})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff}, './file0\x00'})
read$ptp(r3, &(0x7f0000000400)=""/255, 0xff)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0)
preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/192, 0xc0}], 0x1, 0x0, 0x0)
preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000080)=""/230, 0xe6}], 0x1, 0x2a, 0x0)
openat(r4, &(0x7f0000000540)='./file0\x00', 0x410000, 0x102)
ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f00000001c0)={{0x8, 0x1000}, {0x8, 0x200}, 0x100})
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=<r5=>0x0)
timer_create(0x4, &(0x7f00000002c0)={0x0, 0x27, 0x2, @tid=r5}, &(0x7f0000000500))

06:36:00 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x89a0, &(0x7f0000003b80)={'ip6gre0\x00', @ifru_addrs=@xdp})

06:36:00 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x30}}, 0x0)

06:36:00 executing program 4:
bpf$BPF_GET_BTF_INFO(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x14, 0x0}, 0x10)

06:36:00 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=<r0=>0x0) (async)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async)
timer_create(0x2, &(0x7f00000003c0)={0x0, 0x14, 0x2, @thr={&(0x7f0000000500)="ad7102320699900abab5d04f3bd52381196f5f42b55194ad0b552290a7da4d6e511ea45036ddc1d91a8820267ef5de632c420c269011017f2fe857d991001676112b0b2f07b7d1a84c103df8817ae9e18f1665007dbf248586cd5d5fffe53b06", &(0x7f0000000580)="042264a13bb44104324b43ec6761543bfbd9c3c635729db949bcc10ed57a04a88b3601e8865ba3866620f9ea058bd84c03a0ad6ffc2b95a5a34976984ae28d487daadeb8534df48ec434548c6b9adcb2416c0d0b8a6eeff1d7f2441d11e782639244fc0b1fd1370b13489227ef389eea230dde246df754ffb457f124e66286307d4ef798c548766008f5819ad6bddd16e5f053c578"}}, &(0x7f0000000100)=<r1=>0x0) (async)
clock_gettime(0x0, &(0x7f0000000180)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000001c0)={{r2, r3+60000000}, {0x0, 0x989680}}, &(0x7f0000000240))
clock_gettime(0x0, &(0x7f0000000280)={<r4=>0x0, <r5=>0x0}) (async)
clock_gettime(0x0, &(0x7f00000002c0)={<r6=>0x0, <r7=>0x0})
timer_settime(r0, 0x0, &(0x7f0000000340)={{r4, r5+60000000}, {r6, r7+10000000}}, &(0x7f0000000380)) (async)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async)
r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/205, 0xcd}], 0x1, 0x0, 0x0) (async, rerun: 64)
close(r8) (rerun: 64)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:36:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x38}}, 0x0)

06:36:01 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)

06:36:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x38}}, 0x0)

06:36:03 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(r2, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0)

06:36:03 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r1=>0x0, <r2=>0x0})
timer_settime(r0, 0x1, &(0x7f00000001c0)={{r1, r2+60000000}, {0x0, 0x989680}}, &(0x7f0000000240))
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
close(r3)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0)

06:36:03 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000003500)={0x0, 0x0, &(0x7f00000034c0)={&(0x7f0000003480)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x1c}}, 0x0)

06:36:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x38}}, 0x0)

06:36:03 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2)
r4 = dup3(r1, r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040))

06:36:03 executing program 3:
timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={<r2=>r1, 0x0, 0x7ff, 0x661})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff}, './file0\x00'})
read$ptp(r3, &(0x7f0000000400)=""/255, 0xff) (async)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0)
preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/192, 0xc0}], 0x1, 0x0, 0x0) (async)
preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000080)=""/230, 0xe6}], 0x1, 0x2a, 0x0) (async)
openat(r4, &(0x7f0000000540)='./file0\x00', 0x410000, 0x102) (async)
ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f00000001c0)={{0x8, 0x1000}, {0x8, 0x200}, 0x100})
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=<r5=>0x0)
timer_create(0x4, &(0x7f00000002c0)={0x0, 0x27, 0x2, @tid=r5}, &(0x7f0000000500))

06:36:04 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x8930, &(0x7f0000003b80)={'ip6gre0\x00', @ifru_addrs=@xdp})

06:36:04 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
bind$xdp(r0, 0x0, 0x0)

06:36:04 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000001080)=""/4090, 0x2c, 0xeb0, 0xfffffffd}, 0x20)

06:36:04 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x0, [0x0, 0x0, 0x3]}, {0x6, @usage=0x1, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, @usage, 0x0, 0x0, [0x7]}, {0x0, @struct={0x0, 0x800}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, @usage=0x6, 0x0, 0x0, [0x0, 0x3, 0x0, 0x6]}, {0x0, 0x4, 0x20000000200}})
dup3(r3, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[], 0x5000, 0x30010})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

06:36:04 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x8929, &(0x7f0000003b80)={'ip6gre0\x00', @ifru_addrs=@xdp})

06:36:04 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xd, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x6, 0x0, &(0x7f0000000500), 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x3, 0x400}, 0x10}, 0x78)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x200}, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, 0x0)
chdir(0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpgid(0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mknod(&(0x7f0000000200)='./file0\x00', 0xc000, 0x3f)
sendfile(r0, r1, 0x0, 0x8000000a)

[  859.572614][T12120] loop2: detected capacity change from 0 to 262160
[  859.601604][   T26] audit: type=1800 audit(1639463764.541:9): pid=12120 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1194 res=0 errno=0
[  860.293102][T12115] ------------[ cut here ]------------
[  860.299091][T12115] WARNING: CPU: 1 PID: 12115 at arch/x86/kvm/vmx/nested.c:4550 nested_vmx_vmexit+0x16bd/0x17e0
[  860.309985][T12115] Modules linked in:
[  860.315586][T12115] CPU: 0 PID: 12115 Comm: syz-executor.4 Not tainted 5.16.0-rc5-syzkaller #0
[  860.324985][T12115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  860.343041][T12115] RIP: 0010:nested_vmx_vmexit+0x16bd/0x17e0
[  860.358078][T12115] Code: df e8 f7 8e a9 00 e9 b1 f7 ff ff 89 d9 80 e1 07 38 c1 0f 8c 51 eb ff ff 48 89 df e8 2d 8e a9 00 e9 44 eb ff ff e8 63 ba 5d 00 <0f> 0b e9 2e f8 ff ff e8 57 ba 5d 00 0f 0b e9 00 f1 ff ff 89 e9 80
[  860.396874][T12115] RSP: 0018:ffffc900104a7888 EFLAGS: 00010246
[  860.403147][T12115] RAX: ffffffff8126df0d RBX: 0000000000000000 RCX: 0000000000040000
[  860.420040][T12115] RDX: ffffc9000bac3000 RSI: 000000000003ffff RDI: 0000000000040000
[  860.430036][T12115] RBP: 0000000000000001 R08: ffffffff8126d730 R09: ffffed100df4a008
[  860.455466][T12115] R10: ffffed100df4a008 R11: 0000000000000000 R12: ffff88806fa50000
[  860.472153][T12115] R13: ffff88807b7a8000 R14: dffffc0000000000 R15: 1ffff1100f6f505d
[  860.490017][T12115] FS:  00007fb40e14f700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[  860.504042][T12115] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  860.510768][T12115] CR2: 0000565553d4b600 CR3: 00000000304c6000 CR4: 00000000003526f0
[  860.520706][T12115] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  860.530325][T12115] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  860.548655][T12115] Call Trace:
[  860.552078][T12115]  <TASK>
[  860.557961][T12115]  nested_vmx_free_vcpu+0x83/0xc0
[  860.563147][T12115]  vmx_free_vcpu+0x11f/0x2a0
[  860.568448][T12115]  kvm_arch_vcpu_destroy+0x6b/0x240
[  860.574335][T12115]  kvm_vcpu_destroy+0x29/0x90
[  860.579359][T12115]  kvm_arch_destroy_vm+0x3ef/0x6b0
[  860.585815][T12115]  kvm_put_kvm+0x751/0xe40
[  860.590500][T12115]  ? kvm_vcpu_mmap+0x250/0x250
[  860.602455][T12115]  kvm_vcpu_release+0x53/0x60
[  860.607881][T12115]  __fput+0x3fc/0x870
[  860.612198][T12115]  task_work_run+0x146/0x1c0
[  860.617716][T12115]  get_signal+0x2078/0x2120
[  860.622369][T12115]  ? kasan_save_stack+0x55/0x60
[  860.627919][T12115]  ? kasan_save_stack+0x3b/0x60
[  860.632980][T12115]  ? __kasan_record_aux_stack+0xfa/0x130
[  860.638951][T12115]  ? task_work_add+0x2f/0x1b0
[  860.644605][T12115]  ? fput_many+0xe0/0x1a0
[  860.648958][T12115]  ? __se_sys_ioctl+0x154/0x170
[  860.654225][T12115]  ? do_syscall_64+0x44/0xd0
[  860.659449][T12115]  ? entry_SYSCALL_64_after_hwframe+0x44/0xae
[  860.666990][T12115]  ? ptrace_notify+0x340/0x340
[  860.671805][T12115]  arch_do_signal_or_restart+0x9c/0x730
[  860.677546][T12115]  ? get_sigframe_size+0x10/0x10
[  860.682490][T12115]  ? lockdep_hardirqs_on_prepare+0x412/0x780
[  860.688542][T12115]  ? exit_to_user_mode_prepare+0x12e/0x220
[  860.694508][T12115]  exit_to_user_mode_prepare+0x191/0x220
[  860.700156][T12115]  ? trace_irq_disable_rcuidle+0x11/0x170
[  860.706069][T12115]  syscall_exit_to_user_mode+0x2e/0x70
[  860.711545][T12115]  do_syscall_64+0x53/0xd0
[  860.716049][T12115]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  860.722022][T12115] RIP: 0033:0x7fb40f7d9e99
[  860.727364][T12115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  860.747069][T12115] RSP: 002b:00007fb40e14f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  860.755538][T12115] RAX: fffffffffffffffc RBX: 00007fb40f8ecf60 RCX: 00007fb40f7d9e99
[  860.764824][T12115] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  860.772830][T12115] RBP: 00007fb40f833ff1 R08: 0000000000000000 R09: 0000000000000000
[  860.781396][T12115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  860.792859][T12115] R13: 00007ffdba89800f R14: 00007fb40e14f300 R15: 0000000000022000
[  860.801618][T12115]  </TASK>
[  860.805076][T12115] Kernel panic - not syncing: panic_on_warn set ...
[  860.811667][T12115] CPU: 1 PID: 12115 Comm: syz-executor.4 Not tainted 5.16.0-rc5-syzkaller #0
[  860.820421][T12115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  860.830467][T12115] Call Trace:
[  860.833746][T12115]  <TASK>
[  860.836682][T12115]  dump_stack_lvl+0x1dc/0x2d8
[  860.841365][T12115]  ? show_regs_print_info+0x12/0x12
[  860.846570][T12115]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[  860.852309][T12115]  panic+0x2d6/0x810
[  860.856198][T12115]  ? __warn+0x13e/0x270
[  860.860361][T12115]  ? nmi_panic+0x90/0x90
[  860.865663][T12115]  __warn+0x26a/0x270
[  860.871304][T12115]  ? nested_vmx_vmexit+0x16bd/0x17e0
[  860.876593][T12115]  ? nested_vmx_vmexit+0x16bd/0x17e0
[  860.882837][T12115]  report_bug+0x1b1/0x2e0
[  860.887539][T12115]  handle_bug+0x3d/0x70
[  860.891697][T12115]  exc_invalid_op+0x16/0x40
[  860.896192][T12115]  asm_exc_invalid_op+0x12/0x20
[  860.901033][T12115] RIP: 0010:nested_vmx_vmexit+0x16bd/0x17e0
[  860.906922][T12115] Code: df e8 f7 8e a9 00 e9 b1 f7 ff ff 89 d9 80 e1 07 38 c1 0f 8c 51 eb ff ff 48 89 df e8 2d 8e a9 00 e9 44 eb ff ff e8 63 ba 5d 00 <0f> 0b e9 2e f8 ff ff e8 57 ba 5d 00 0f 0b e9 00 f1 ff ff 89 e9 80
[  860.926516][T12115] RSP: 0018:ffffc900104a7888 EFLAGS: 00010246
[  860.932576][T12115] RAX: ffffffff8126df0d RBX: 0000000000000000 RCX: 0000000000040000
[  860.940540][T12115] RDX: ffffc9000bac3000 RSI: 000000000003ffff RDI: 0000000000040000
[  860.948592][T12115] RBP: 0000000000000001 R08: ffffffff8126d730 R09: ffffed100df4a008
[  860.956553][T12115] R10: ffffed100df4a008 R11: 0000000000000000 R12: ffff88806fa50000
[  860.964598][T12115] R13: ffff88807b7a8000 R14: dffffc0000000000 R15: 1ffff1100f6f505d
[  860.972749][T12115]  ? nested_vmx_vmexit+0xee0/0x17e0
[  860.977949][T12115]  ? nested_vmx_vmexit+0x16bd/0x17e0
[  860.983337][T12115]  ? nested_vmx_vmexit+0x16bd/0x17e0
[  860.988628][T12115]  nested_vmx_free_vcpu+0x83/0xc0
[  860.993658][T12115]  vmx_free_vcpu+0x11f/0x2a0
[  860.998239][T12115]  kvm_arch_vcpu_destroy+0x6b/0x240
[  861.003445][T12115]  kvm_vcpu_destroy+0x29/0x90
[  861.008116][T12115]  kvm_arch_destroy_vm+0x3ef/0x6b0
[  861.013221][T12115]  kvm_put_kvm+0x751/0xe40
[  861.017640][T12115]  ? kvm_vcpu_mmap+0x250/0x250
[  861.022391][T12115]  kvm_vcpu_release+0x53/0x60
[  861.027054][T12115]  __fput+0x3fc/0x870
[  861.031035][T12115]  task_work_run+0x146/0x1c0
[  861.035625][T12115]  get_signal+0x2078/0x2120
[  861.040138][T12115]  ? kasan_save_stack+0x55/0x60
[  861.044994][T12115]  ? kasan_save_stack+0x3b/0x60
[  861.049851][T12115]  ? __kasan_record_aux_stack+0xfa/0x130
[  861.055587][T12115]  ? task_work_add+0x2f/0x1b0
[  861.061677][T12115]  ? fput_many+0xe0/0x1a0
[  861.066012][T12115]  ? __se_sys_ioctl+0x154/0x170
[  861.070859][T12115]  ? do_syscall_64+0x44/0xd0
[  861.075445][T12115]  ? entry_SYSCALL_64_after_hwframe+0x44/0xae
[  861.081514][T12115]  ? ptrace_notify+0x340/0x340
[  861.086277][T12115]  arch_do_signal_or_restart+0x9c/0x730
[  861.091818][T12115]  ? get_sigframe_size+0x10/0x10
[  861.096744][T12115]  ? lockdep_hardirqs_on_prepare+0x412/0x780
[  861.102733][T12115]  ? exit_to_user_mode_prepare+0x12e/0x220
[  861.108530][T12115]  exit_to_user_mode_prepare+0x191/0x220
[  861.114154][T12115]  ? trace_irq_disable_rcuidle+0x11/0x170
[  861.119864][T12115]  syscall_exit_to_user_mode+0x2e/0x70
[  861.125308][T12115]  do_syscall_64+0x53/0xd0
[  861.129716][T12115]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  861.135598][T12115] RIP: 0033:0x7fb40f7d9e99
[  861.140002][T12115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  861.159593][T12115] RSP: 002b:00007fb40e14f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  861.167996][T12115] RAX: fffffffffffffffc RBX: 00007fb40f8ecf60 RCX: 00007fb40f7d9e99
[  861.175953][T12115] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  861.183912][T12115] RBP: 00007fb40f833ff1 R08: 0000000000000000 R09: 0000000000000000
[  861.191868][T12115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  861.199826][T12115] R13: 00007ffdba89800f R14: 00007fb40e14f300 R15: 0000000000022000
[  861.207828][T12115]  </TASK>
[  861.211303][T12115] Kernel Offset: disabled
[  861.215628][T12115] Rebooting in 86400 seconds..