ffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x80000000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8901, 0x0)
ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x400)
setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000100), 0x4)

05:54:03 executing program 3:
syz_mount_image$cramfs(0x0, &(0x7f0000000080)='./file0\x00', 0xe8ad, 0x2, &(0x7f0000000140)=[{&(0x7f00000000c0)="8f5ce3e2d671f59ece5a15def0cd735363d70f", 0x13, 0x8}, {&(0x7f0000000100)="85ad45dc237b98a89667bbba1e5724b404ce5ea87dfc37", 0x17, 0x2}], 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}, {'team0\x00'}, {'team0\x00'}, {}, {'team0\x00'}, {'team0\x00'}, {'\xc9'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:03 executing program 1:
syz_mount_image$cramfs(0x0, &(0x7f0000000080)='./file0\x00', 0xe8ad, 0x2, &(0x7f0000000140)=[{&(0x7f00000000c0)="8f5ce3e2d671f59ece5a15def0cd735363d70f", 0x13, 0x8}, {&(0x7f0000000100)="85ad45dc237b98a89667bbba1e5724b404ce5ea87dfc37", 0x17, 0x2}], 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}, {'team0\x00'}, {'team0\x00'}, {}, {'team0\x00'}, {'team0\x00'}, {'\xc9'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:03 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x209)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100a8bd7000fbdbdf25020000000a000900aaaaaaaaaaaa000005003800002bac0008000600", @ANYRES32=0x0, @ANYBLOB="08003100ffffff7f0500330000000000050029000000000008003200fcffffff08003c0000010000060028000100000008003400ffff0000"], 0x68}, 0x1, 0x0, 0x0, 0x200448c0}, 0x8090)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x100, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000540)={'batadv0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000fc0)={'batadv0\x00'})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000380)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)

05:54:03 executing program 4:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', 0x0, 0xe8ad, 0x2, &(0x7f0000000140)=[{&(0x7f00000000c0)="8f5ce3e2d671f59ece5a15def0cd735363d70f", 0x13, 0x8}, {&(0x7f0000000100)="85ad45dc237b98a89667bbba1e5724b404ce5ea87dfc37", 0x17, 0x2}], 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}, {'team0\x00'}, {'team0\x00'}, {}, {'team0\x00'}, {'team0\x00'}, {'\xc9'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:03 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x3, 0xb5, 0x7, 0x4000})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)
prctl$PR_CAP_AMBIENT(0x7, 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000500))
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000140)={0x1, 0x4})
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r5, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x9, 0x8, 0x2, {0x0, @sliced={0x4, [0x7, 0x8, 0x1, 0x8000, 0x4, 0x8, 0x5, 0x8, 0x9e04, 0x5, 0x400, 0x1f, 0x5, 0x80, 0x1ff, 0x0, 0x6, 0x3, 0xdbf, 0x1ff, 0x5, 0x6, 0xcf, 0x8, 0x401, 0x3, 0x1, 0x8365, 0x71, 0x81, 0xfffb, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x7, 0x100, 0x2, 0x0, 0x1, 0x9, 0x8, 0x3, 0x0, 0x7fff, 0xe870], 0xfff}}, 0x724})
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x2})
ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000080))
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000180))
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)={0x80000000, 0x0, 0x4, 0x1, 0x80, {}, {0x1, 0x0, 0xff, 0x30, 0x4, 0x9, "359ca356"}, 0x5, 0x4, @offset=0x4015, 0x6, 0x0, r4})

[ 2581.098375][T24916] loop1: detected capacity change from 116 to 0
05:54:03 executing program 5:
syz_io_uring_setup(0x7122, &(0x7f0000000300)={0x0, 0x2d53, 0x2, 0x2, 0xc4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0))
r0 = socket$inet6(0xa, 0xa, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8901, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in, @in6=@ipv4={[], [], @dev}}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000200)=0xe8)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dri/renderD128\x00', 0x2b8100, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dri/renderD128\x00', 0x40000, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000000280)={0x77359400}, 0x10)
ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000000)=0x3)

05:54:03 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x209)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100a8bd7000fbdbdf25020000000a000900aaaaaaaaaaaa000005003800002bac0008000600", @ANYRES32=0x0, @ANYBLOB="08003100ffffff7f0500330000000000050029000000000008003200fcffffff08003c0000010000060028000100000008003400ffff0000"], 0x68}, 0x1, 0x0, 0x0, 0x200448c0}, 0x8090)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x100, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000540)={'batadv0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000fc0)={'batadv0\x00'})
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000380)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)

[ 2581.147173][T24919] loop4: detected capacity change from 116 to 0
[ 2581.168141][T24920] loop3: detected capacity change from 116 to 0
05:54:03 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x209)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100a8bd7000fbdbdf25020000000a000900aaaaaaaaaaaa000005003800002bac0008000600", @ANYRES32=0x0, @ANYBLOB="08003100ffffff7f0500330000000000050029000000000008003200fcffffff08003c0000010000060028000100000008003400ffff0000"], 0x68}, 0x1, 0x0, 0x0, 0x200448c0}, 0x8090)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x100, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000540)={'batadv0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000fc0)={'batadv0\x00'})
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000380)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)

05:54:03 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00'})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
syz_io_uring_setup(0x15fb, &(0x7f0000000140)={0x0, 0x2997, 0x10, 0x2, 0x12a}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @ethernet={0x306, @local}, @hci, @nfc={0x27, 0x1, 0x2, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='veth1\x00', 0x2, 0x0, 0x40})

05:54:03 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x8000, 0x0)
ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f0000000240)=0x6)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000280)='/dev/capi20\x00', 0x8582, 0x0)
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0xe8ad, 0x2, &(0x7f0000000140)=[{&(0x7f00000000c0)="8f5ce3e2d671f59ece5a15def0cd735363d70f", 0x13, 0x8}, {&(0x7f0000000100)="85ad45dc237b98a89667bbba1e5724b404ce5ea87dfc37", 0x17, 0x2}], 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}, {'team0\x00'}, {'team0\x00'}, {}, {'team0\x00'}, {'team0\x00'}, {'\xc9'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:03 executing program 3:
syz_mount_image$cramfs(0x0, &(0x7f0000000080)='./file0\x00', 0xe8ad, 0x2, &(0x7f0000000140)=[{&(0x7f00000000c0)="8f5ce3e2d671f59ece5a15def0cd735363d70f", 0x13, 0x8}, {&(0x7f0000000100)="85ad45dc237b98a89667bbba1e5724b404ce5ea87dfc37", 0x17, 0x2}], 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}, {'team0\x00'}, {'team0\x00'}, {}, {'team0\x00'}, {'team0\x00'}, {'\xc9'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:03 executing program 4:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000140)=[{&(0x7f00000000c0)="8f5ce3e2d671f59ece5a15def0cd735363d70f", 0x13, 0x8}, {&(0x7f0000000100)="85ad45dc237b98a89667bbba1e5724b404ce5ea87dfc37", 0x17, 0x2}], 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}, {'team0\x00'}, {'team0\x00'}, {}, {'team0\x00'}, {'team0\x00'}, {'\xc9'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:04 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x209)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100a8bd7000fbdbdf25020000000a000900aaaaaaaaaaaa000005003800002bac0008000600", @ANYRES32=0x0, @ANYBLOB="08003100ffffff7f0500330000000000050029000000000008003200fcffffff08003c0000010000060028000100000008003400ffff0000"], 0x68}, 0x1, 0x0, 0x0, 0x200448c0}, 0x8090)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x100, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000540)={'batadv0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000fc0)={'batadv0\x00'})
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000380)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)

05:54:04 executing program 0:
syz_mount_image$cramfs(0x0, &(0x7f0000000080)='./file0\x00', 0xe8ad, 0x2, &(0x7f0000000140)=[{&(0x7f00000000c0)="8f5ce3e2d671f59ece5a15def0cd735363d70f", 0x13, 0x8}, {&(0x7f0000000100)="85ad45dc237b98a89667bbba1e5724b404ce5ea87dfc37", 0x17, 0x2}], 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}, {'team0\x00'}, {'team0\x00'}, {}, {'team0\x00'}, {'team0\x00'}, {'\xc9'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

[ 2581.592542][T24955] loop3: detected capacity change from 116 to 0
05:54:04 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0xff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8901, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00'})
setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000000)=0x1, 0x4)

05:54:04 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x5e98c2, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x9)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$CAPI_GET_FLAGS(r2, 0x80044323, &(0x7f0000000100))
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8901, 0x0)
r3 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x100)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000080))
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000180)={0x0, 0xe6, 0xfffffffffffffffe, &(0x7f0000000140)=0x7})
write$tcp_mem(r0, &(0x7f0000000080)={0x3, 0x20, 0x0, 0x20, 0x7}, 0x48)

05:54:04 executing program 3:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', 0x0, 0xe8ad, 0x2, &(0x7f0000000140)=[{&(0x7f00000000c0)="8f5ce3e2d671f59ece5a15def0cd735363d70f", 0x13, 0x8}, {&(0x7f0000000100)="85ad45dc237b98a89667bbba1e5724b404ce5ea87dfc37", 0x17, 0x2}], 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}, {'team0\x00'}, {'team0\x00'}, {}, {'team0\x00'}, {'team0\x00'}, {'\xc9'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:04 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x209)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100a8bd7000fbdbdf25020000000a000900aaaaaaaaaaaa000005003800002bac0008000600", @ANYRES32=0x0, @ANYBLOB="08003100ffffff7f0500330000000000050029000000000008003200fcffffff08003c0000010000060028000100000008003400ffff0000"], 0x68}, 0x1, 0x0, 0x0, 0x200448c0}, 0x8090)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x100, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000540)={'batadv0\x00'})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000380)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)

05:54:04 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00'})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
syz_io_uring_setup(0x15fb, &(0x7f0000000140)={0x0, 0x2997, 0x10, 0x2, 0x12a}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @ethernet={0x306, @local}, @hci, @nfc={0x27, 0x1, 0x2, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='veth1\x00', 0x2, 0x0, 0x40})

05:54:04 executing program 4:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}, {'team0\x00'}, {'team0\x00'}, {}, {'team0\x00'}, {'team0\x00'}, {'\xc9'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:04 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x209)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100a8bd7000fbdbdf25020000000a000900aaaaaaaaaaaa000005003800002bac0008000600", @ANYRES32=0x0, @ANYBLOB="08003100ffffff7f0500330000000000050029000000000008003200fcffffff08003c0000010000060028000100000008003400ffff0000"], 0x68}, 0x1, 0x0, 0x0, 0x200448c0}, 0x8090)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x100, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00'})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000380)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)

05:54:04 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8901, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000000)=0x1, 0x4)

[ 2581.950856][T24994] loop3: detected capacity change from 116 to 0
[ 2581.957832][ T9487] Bluetooth: hci3: command 0x0401 tx timeout
05:54:04 executing program 4:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{'$'}, {'team0\x00'}, {'team0\x00'}, {'team0\x00'}, {}, {'team0\x00'}, {'team0\x00'}, {'\xc9'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:04 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00'})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
syz_io_uring_setup(0x15fb, &(0x7f0000000140)={0x0, 0x2997, 0x10, 0x2, 0x12a}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @ethernet={0x306, @local}, @hci, @nfc={0x27, 0x1, 0x2, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='veth1\x00', 0x2, 0x0, 0x40})

05:54:04 executing program 0:
syz_mount_image$cramfs(0x0, &(0x7f0000000080)='./file0\x00', 0xe8ad, 0x2, &(0x7f0000000140)=[{&(0x7f00000000c0)="8f5ce3e2d671f59ece5a15def0cd735363d70f", 0x13, 0x8}, {&(0x7f0000000100)="85ad45dc237b98a89667bbba1e5724b404ce5ea87dfc37", 0x17, 0x2}], 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}, {'team0\x00'}, {'team0\x00'}, {}, {'team0\x00'}, {'team0\x00'}, {'\xc9'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:04 executing program 3:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', 0x0, 0xe8ad, 0x2, &(0x7f0000000140)=[{&(0x7f00000000c0)="8f5ce3e2d671f59ece5a15def0cd735363d70f", 0x13, 0x8}, {&(0x7f0000000100)="85ad45dc237b98a89667bbba1e5724b404ce5ea87dfc37", 0x17, 0x2}], 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}, {'team0\x00'}, {'team0\x00'}, {}, {'team0\x00'}, {'team0\x00'}, {'\xc9'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:04 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x209)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100a8bd7000fbdbdf25020000000a000900aaaaaaaaaaaa000005003800002bac0008000600", @ANYRES32=0x0, @ANYBLOB="08003100ffffff7f0500330000000000050029000000000008003200fcffffff08003c0000010000060028000100000008003400ffff0000"], 0x68}, 0x1, 0x0, 0x0, 0x200448c0}, 0x8090)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x100, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00'})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000380)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)

05:54:04 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00'})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
syz_io_uring_setup(0x15fb, &(0x7f0000000140)={0x0, 0x2997, 0x10, 0x2, 0x12a}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @ethernet={0x306, @local}, @hci, @nfc={0x27, 0x1, 0x2, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='veth1\x00', 0x2, 0x0, 0x40})

05:54:04 executing program 0:
r0 = socket$inet6(0xa, 0x800, 0x9)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)={0x0, 0x1ff, 0x10001, &(0x7f0000000080)=0x158})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00')
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xdc, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x4014084)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8901, 0x0)
getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4)
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x444200)

[ 2582.315831][T25015] loop3: detected capacity change from 116 to 0
05:54:04 executing program 3:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', 0x0, 0xe8ad, 0x2, &(0x7f0000000140)=[{&(0x7f00000000c0)="8f5ce3e2d671f59ece5a15def0cd735363d70f", 0x13, 0x8}, {&(0x7f0000000100)="85ad45dc237b98a89667bbba1e5724b404ce5ea87dfc37", 0x17, 0x2}], 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}, {'team0\x00'}, {'team0\x00'}, {}, {'team0\x00'}, {'team0\x00'}, {'\xc9'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:04 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x1, 0x0)
ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000140))
msgsnd(0xffffffffffffffff, &(0x7f0000000000)={0x2, "92a5d6b9b15393647473d8fd558121a98511bb50348153dd4a7d3741ddfeb4387af3595651023d3adf4846718c764f2892d9f0374bbbfd8678977acd9b44815323a0ceb7aaf19d5ac6369806a9f4f99e8ab16c115e1026adcd8fe8767ba045920ebbd19c6bbd7a9792b8de84d390e7c4feb12591f35454411173d6513537c1bb9fc20fb3b6cf2499dba87d9bb793cab6680e16a5ba9b67d6d2aa5b15fbf5c2fa5a919601d1a4efc80ec5609335c9db9b676ff4fa1ff14394e5c9e617dcfaa741ac014b5068cac392e0270c38e0732594fcabed8603cf5fe597db42ec492e6b3e5cdf1f"}, 0xeb, 0x800)
r1 = socket$inet6(0xa, 0x3, 0x9)
msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000180)=""/81)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8901, 0x0)

05:54:04 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00'})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @ethernet={0x306, @local}, @hci, @nfc={0x27, 0x1, 0x2, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='veth1\x00', 0x2, 0x0, 0x40})

05:54:05 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x209)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100a8bd7000fbdbdf25020000000a000900aaaaaaaaaaaa000005003800002bac0008000600", @ANYRES32=0x0, @ANYBLOB="08003100ffffff7f0500330000000000050029000000000008003200fcffffff08003c0000010000060028000100000008003400ffff0000"], 0x68}, 0x1, 0x0, 0x0, 0x200448c0}, 0x8090)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x100, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00'})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000380)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)

05:54:05 executing program 4:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{'$'}, {'team0\x00'}, {'team0\x00'}, {'team0\x00'}, {}, {'team0\x00'}, {'team0\x00'}, {'\xc9'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:05 executing program 0:
r0 = socket$inet6(0xa, 0xa, 0x10000009)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @xdp={0x2c, 0xa, 0x0, 0xd}, @generic={0x29, "e8610da20a4a9fc7acf3c33be300"}, @l2={0x1f, 0x400, @fixed={[], 0x12}, 0x2}, 0xa2, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x7fffffff, 0x29, 0x1c})
r1 = socket(0x2b, 0x3, 0x1)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000007c0)={0x54, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x101}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40008001}, 0x20000002)

05:54:05 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8901, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x2400, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_ext={0x1c, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3ff}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x1, 0x3, 0xb, 0x1, 0x80, 0x8}, @exit, @alu={0x7, 0x1, 0x1, 0x4, 0x4, 0xfffffffffffffff0, 0xffffffffffffffff}]}, &(0x7f0000000080)='GPL\x00', 0x800, 0x17, &(0x7f00000000c0)=""/23, 0x40f00, 0x10, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0xf, 0xfe6, 0x1}, 0x10, 0x1c1a1, r1}, 0x78)

[ 2582.634880][T25044] loop3: detected capacity change from 116 to 0
05:54:05 executing program 0:
r0 = socket$inet6(0xa, 0xa, 0x10000009)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @xdp={0x2c, 0xa, 0x0, 0xd}, @generic={0x29, "e8610da20a4a9fc7acf3c33be300"}, @l2={0x1f, 0x400, @fixed={[], 0x12}, 0x2}, 0xa2, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x7fffffff, 0x29, 0x1c})
r1 = socket(0x2b, 0x3, 0x1)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000007c0)={0x54, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x101}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40008001}, 0x20000002)

05:54:05 executing program 3:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000140)=[{&(0x7f00000000c0)="8f5ce3e2d671f59ece5a15def0cd735363d70f", 0x13, 0x8}, {&(0x7f0000000100)="85ad45dc237b98a89667bbba1e5724b404ce5ea87dfc37", 0x17, 0x2}], 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}, {'team0\x00'}, {'team0\x00'}, {}, {'team0\x00'}, {'team0\x00'}, {'\xc9'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:05 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00'})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @ethernet={0x306, @local}, @hci, @nfc={0x27, 0x1, 0x2, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='veth1\x00', 0x2, 0x0, 0x40})

05:54:05 executing program 2:
socket$inet6(0xa, 0x2, 0x209)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100a8bd7000fbdbdf25020000000a000900aaaaaaaaaaaa000005003800002bac0008000600", @ANYRES32=0x0, @ANYBLOB="08003100ffffff7f0500330000000000050029000000000008003200fcffffff08003c0000010000060028000100000008003400ffff0000"], 0x68}, 0x1, 0x0, 0x0, 0x200448c0}, 0x8090)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x100, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)

05:54:05 executing program 4:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{'$'}, {'team0\x00'}, {'team0\x00'}, {'team0\x00'}, {}, {'team0\x00'}, {'team0\x00'}, {'\xc9'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:05 executing program 5:
r0 = socket$inet6(0xa, 0x807, 0x3)
ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x9)
socket$inet6(0xa, 0x80000, 0x3f)
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000000)={0x1, 0x1, 0x10000, 0xc282, 0x1, [0xd8, 0xffff, 0x4, 0x400], [0x1, 0x3f, 0x3, 0x36b], [0x2, 0x9, 0x5, 0x2], [0x9, 0x3f, 0x7, 0x7]})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8901, 0x0)

05:54:05 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @ethernet={0x306, @local}, @hci, @nfc={0x27, 0x1, 0x2, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='veth1\x00', 0x2, 0x0, 0x40})

05:54:05 executing program 0:
r0 = socket$inet6(0xa, 0xa, 0x10000009)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @xdp={0x2c, 0xa, 0x0, 0xd}, @generic={0x29, "e8610da20a4a9fc7acf3c33be300"}, @l2={0x1f, 0x400, @fixed={[], 0x12}, 0x2}, 0xa2, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x7fffffff, 0x29, 0x1c})
r1 = socket(0x2b, 0x3, 0x1)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000007c0)={0x54, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x101}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40008001}, 0x20000002)

05:54:05 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @ethernet={0x306, @local}, @hci, @nfc={0x27, 0x1, 0x2, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='veth1\x00', 0x2, 0x0, 0x40})

05:54:05 executing program 3:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}, {'team0\x00'}, {'team0\x00'}, {}, {'team0\x00'}, {'team0\x00'}, {'\xc9'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:05 executing program 2:
socket$inet6(0xa, 0x2, 0x209)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100a8bd7000fbdbdf25020000000a000900aaaaaaaaaaaa000005003800002bac0008000600", @ANYRES32=0x0, @ANYBLOB="08003100ffffff7f0500330000000000050029000000000008003200fcffffff08003c0000010000060028000100000008003400ffff0000"], 0x68}, 0x1, 0x0, 0x0, 0x200448c0}, 0x8090)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)

05:54:05 executing program 4:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, 0x0)

05:54:05 executing program 0:
r0 = socket$inet6(0xa, 0xa, 0x10000009)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @xdp={0x2c, 0xa, 0x0, 0xd}, @generic={0x29, "e8610da20a4a9fc7acf3c33be300"}, @l2={0x1f, 0x400, @fixed={[], 0x12}, 0x2}, 0xa2, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x7fffffff, 0x29, 0x1c})
socket(0x2b, 0x3, 0x1)

05:54:05 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @ethernet={0x306, @local}, @hci, @nfc={0x27, 0x1, 0x2, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='veth1\x00', 0x2, 0x0, 0x40})

05:54:05 executing program 3:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{'$'}, {'team0\x00'}, {'team0\x00'}, {'team0\x00'}, {}, {'team0\x00'}, {'team0\x00'}, {'\xc9'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:05 executing program 2:
socket$inet6(0xa, 0x2, 0x209)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)

05:54:05 executing program 4:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, 0x0)

05:54:05 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8901, 0x0)
io_uring_setup(0x2cf4, &(0x7f0000000000)={0x0, 0xffe1, 0x0, 0x2, 0x2d0})

05:54:06 executing program 0:
r0 = socket$inet6(0xa, 0xa, 0x10000009)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)
socket(0x2b, 0x3, 0x1)

05:54:06 executing program 1:
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @ethernet={0x306, @local}, @hci, @nfc={0x27, 0x1, 0x2, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='veth1\x00', 0x2, 0x0, 0x40})

05:54:06 executing program 4:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, 0x0)

05:54:06 executing program 2:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)

05:54:06 executing program 3:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{'$'}, {'team0\x00'}, {'team0\x00'}, {'team0\x00'}, {}, {'team0\x00'}, {'team0\x00'}, {'\xc9'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:06 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8901, 0x0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10)
keyctl$set_reqkey_keyring(0xe, 0x3)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000000)=0x2, 0x4)

05:54:06 executing program 0:
socket$inet6(0xa, 0xa, 0x10000009)
socket(0x2b, 0x3, 0x1)

05:54:06 executing program 1:
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @ethernet={0x306, @local}, @hci, @nfc={0x27, 0x1, 0x2, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='veth1\x00', 0x2, 0x0, 0x40})

05:54:06 executing program 2:
socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000380)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)

05:54:06 executing program 4:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}, {'team0\x00'}, {'team0\x00'}, {}, {'team0\x00'}, {'team0\x00'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:06 executing program 3:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{'$'}, {'team0\x00'}, {'team0\x00'}, {'team0\x00'}, {}, {'team0\x00'}, {'team0\x00'}, {'\xc9'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:06 executing program 1:
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @ethernet={0x306, @local}, @hci, @nfc={0x27, 0x1, 0x2, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='veth1\x00', 0x2, 0x0, 0x40})

05:54:06 executing program 5:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8901, 0x0)

05:54:06 executing program 0:
socket(0x2b, 0x3, 0x1)

05:54:06 executing program 2:
socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000380)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)

[ 2584.031951][ T9847] Bluetooth: hci3: command 0x0401 tx timeout
05:54:06 executing program 4:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}, {'team0\x00'}, {'team0\x00'}, {}, {'team0\x00'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:06 executing program 3:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, 0x0)

05:54:06 executing program 0:
socket(0x0, 0x3, 0x1)

05:54:06 executing program 2:
socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000380)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)

05:54:06 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x10001)
shmget(0x1, 0x2000, 0x100, &(0x7f0000ffe000/0x2000)=nil)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8901, 0x0)

05:54:06 executing program 4:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}, {'team0\x00'}, {'team0\x00'}, {}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:06 executing program 1:
r0 = socket$inet6(0xa, 0x0, 0x9)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @ethernet={0x306, @local}, @hci, @nfc={0x27, 0x1, 0x2, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='veth1\x00', 0x2, 0x0, 0x40})

05:54:06 executing program 3:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, 0x0)

05:54:07 executing program 2:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, 0x0, 0x0)

05:54:07 executing program 5:
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8)
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x6, 0x3, &(0x7f0000000280)=[{&(0x7f0000000080)="04f574b59b34b97840656f899e9f2115b6e730291718c5e1893a895e46d7b5c6e6f6f86bd44c0398191f6713e1f24c654db6f9df9d5628a62165e056a04f84787eb8b6d77c935c5699", 0x49, 0xfff}, {&(0x7f0000000100)="a852edc027a73c870d7521d6892f64751285e6b30a69db8184534013fe98353f23135cefdf0d3e4c11d6b17b316b263195effd9bf96088bcfd8eaa40dfe6d2f8fab3775305868bc1f74c8d201dc3a77729b29c499960afc0a5e426f8d42f150ed9224b4317475f", 0x67, 0x41657bb7}, {&(0x7f0000000180)="b36adf609537434e428de92747b05de1223e4a3c9aa93fc707f4a648cbffbef1c8d20370e0878bed1d28230e9841cc5cfcd5be51ffae8aa4ca5a7381affd8b0bff1194d0b6826233cdf07653d9287789cb8e1b077b32224831081e3d0d3c6b8ed991781aec7b5bb8da141a871fcd88ab02b0169108389255030b898def2581fad25c27c6008b896231e7a64601b03bf3793e9b0373f3e0298b73d8e9149ea52f7b6d4add5ce5363a5f39cbe614c21f000c6dbfdc90ccc7c9d597292f242ed7793b13649c044c5de81d74584fa9599e46362a2e93947e2fc1fda9dcc9", 0xdc, 0x9}], 0x2000, &(0x7f0000000440)={[{}, {}, {')'}, {']./['}], [{@fowner_lt={'fowner<', r0}}, {@subj_role={'subj_role', 0x3d, '-*,'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@pcr={'pcr', 0x3d, 0x14}}, {@smackfshat={'smackfshat', 0x3d, '-'}}, {@appraise_type='appraise_type=imasig'}]})
syz_mount_image$cramfs(&(0x7f0000000500)='cramfs\x00', &(0x7f0000000540)='./file0\x00', 0x1ff, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000580)="0f12b1b7764c2d1787128b2d16fba7574644e6d999dffe337e38b32e2f1edec4909ac4538c6642c0374846f5219d1cc5257bb306cf8311f42388ba6b9b09d3189e547698096f50a72a37ef3a1031aa3c7666d72732", 0x55, 0xc265}, {&(0x7f0000000600)="44c7bd48404ed417e6447d121500b1dc0d2ef44d0f06d9fcf7e0a8bb21fc77e51d0d74cf64ba8502e5a3fd37a2ecd7085f301ad99381c7a52136e9240199de306df01501ffc7f28a0d68952c9cc01f29ae94cc9b9a04aabdf9a79410c6c85e7c196fa0d92541578f5ad3e5c0cedbb8ac7dc29782315e78272c28580f3a0f63531737f8ee3f1fb9dd5e4ce8f3a594504d704fe7ba07775b4f475da68e18fe3b74ef15cf9e0168246b08afe6a3ea2ced523febc51b97d6e2655ad65519163d4357b427672524d579a8724640a7d477e9dd82", 0xd1, 0x6}, {&(0x7f0000000700)="4b25666f192f365d91827889c52082bf7fc85315de1db9d0a4a953872dda26d2095d04e0b1640bd2b4ff3166433a310e8b2bae87e6eb96cb3dd3a14ec05b3b4f739f1f912d9d1f7e65b830a463a10e118e4de4b444aeeb9c6718e0d1f72abb118b47d4e5dde9ee884453aa587596f4ba864bc25dfceaad7dd69d6b824cdd23d8c148c8cef782d4e248afa1395a77947784c27c2b3af5ec8d5493aab43ec145a4ed42f159191e85124ac3f9c2b0c4f3f657ed2602ec04d4007b590f18a4421fac51b46078ae59315f33", 0xc9, 0xa}, {&(0x7f0000000800)="25d6b856f497b9d95b03b743b1229e4c4b56356514c0ec2723c40b02057c1229317da9705bc6d85061ff53403d790345ce1250aabf8728f3f07943e59fbf49e16935967f45", 0x45, 0x14bb8000000}, {&(0x7f0000000880)="40d772c8e35561cad35af1aee5958b1adb59bb51179ad9ca45", 0x19, 0x21}], 0x200000, &(0x7f0000000940)={[], [{@obj_user={'obj_user', 0x3d, ')'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]})
r1 = socket$inet6(0xa, 0x2, 0x8000009)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8901, 0x0)

05:54:07 executing program 0:
socket(0x0, 0x3, 0x1)

05:54:07 executing program 4:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}, {'team0\x00'}, {'team0\x00'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:07 executing program 2:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, 0x0, 0x0)

05:54:07 executing program 1:
r0 = socket$inet6(0xa, 0x0, 0x9)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @ethernet={0x306, @local}, @hci, @nfc={0x27, 0x1, 0x2, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='veth1\x00', 0x2, 0x0, 0x40})

[ 2584.656112][T25175] loop5: detected capacity change from 58747 to 0
05:54:07 executing program 3:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, 0x0)

05:54:07 executing program 4:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}, {'team0\x00'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

[ 2584.758980][T25175] loop5: detected capacity change from 264192 to 0
[ 2584.815241][T25175] cramfs: Unknown parameter 'obj_user'
05:54:07 executing program 2:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, 0x0, 0x0)

05:54:07 executing program 0:
socket(0x0, 0x3, 0x1)

[ 2584.961972][T25187] loop5: detected capacity change from 264192 to 0
05:54:07 executing program 3:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}, {'team0\x00'}, {'team0\x00'}, {}, {'team0\x00'}, {'team0\x00'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:07 executing program 1:
r0 = socket$inet6(0xa, 0x0, 0x9)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @ethernet={0x306, @local}, @hci, @nfc={0x27, 0x1, 0x2, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='veth1\x00', 0x2, 0x0, 0x40})

[ 2585.005940][T25187] cramfs: Unknown parameter 'obj_user'
05:54:07 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8901, 0x0)

05:54:07 executing program 2:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

05:54:07 executing program 0:
socket(0x2b, 0x0, 0x1)

05:54:07 executing program 4:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:07 executing program 3:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}, {'team0\x00'}, {'team0\x00'}, {}, {'team0\x00'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:07 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @ethernet={0x306, @local}, @hci, @nfc={0x27, 0x1, 0x2, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='veth1\x00', 0x2, 0x0, 0x40})

05:54:07 executing program 2:
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8)
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x6, 0x3, &(0x7f0000000280)=[{&(0x7f0000000080)="04f574b59b34b97840656f899e9f2115b6e730291718c5e1893a895e46d7b5c6e6f6f86bd44c0398191f6713e1f24c654db6f9df9d5628a62165e056a04f84787eb8b6d77c935c5699", 0x49, 0xfff}, {&(0x7f0000000100)="a852edc027a73c870d7521d6892f64751285e6b30a69db8184534013fe98353f23135cefdf0d3e4c11d6b17b316b263195effd9bf96088bcfd8eaa40dfe6d2f8fab3775305868bc1f74c8d201dc3a77729b29c499960afc0a5e426f8d42f150ed9224b4317475f", 0x67, 0x41657bb7}, {&(0x7f0000000180)="b36adf609537434e428de92747b05de1223e4a3c9aa93fc707f4a648cbffbef1c8d20370e0878bed1d28230e9841cc5cfcd5be51ffae8aa4ca5a7381affd8b0bff1194d0b6826233cdf07653d9287789cb8e1b077b32224831081e3d0d3c6b8ed991781aec7b5bb8da141a871fcd88ab02b0169108389255030b898def2581fad25c27c6008b896231e7a64601b03bf3793e9b0373f3e0298b73d8e9149ea52f7b6d4add5ce5363a5f39cbe614c21f000c6dbfdc90ccc7c9d597292f242ed7793b13649c044c5de81d74584fa9599e46362a2e93947e2fc1fda9dcc9", 0xdc, 0x9}], 0x2000, &(0x7f0000000440)={[{}, {}, {')'}, {']./['}], [{@fowner_lt={'fowner<', r0}}, {@subj_role={'subj_role', 0x3d, '-*,'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@pcr={'pcr', 0x3d, 0x14}}, {@smackfshat={'smackfshat', 0x3d, '-'}}, {@appraise_type='appraise_type=imasig'}]})
syz_mount_image$cramfs(&(0x7f0000000500)='cramfs\x00', &(0x7f0000000540)='./file0\x00', 0x1ff, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000580)="0f12b1b7764c2d1787128b2d16fba7574644e6d999dffe337e38b32e2f1edec4909ac4538c6642c0374846f5219d1cc5257bb306cf8311f42388ba6b9b09d3189e547698096f50a72a37ef3a1031aa3c7666d72732", 0x55, 0xc265}, {&(0x7f0000000600)="44c7bd48404ed417e6447d121500b1dc0d2ef44d0f06d9fcf7e0a8bb21fc77e51d0d74cf64ba8502e5a3fd37a2ecd7085f301ad99381c7a52136e9240199de306df01501ffc7f28a0d68952c9cc01f29ae94cc9b9a04aabdf9a79410c6c85e7c196fa0d92541578f5ad3e5c0cedbb8ac7dc29782315e78272c28580f3a0f63531737f8ee3f1fb9dd5e4ce8f3a594504d704fe7ba07775b4f475da68e18fe3b74ef15cf9e0168246b08afe6a3ea2ced523febc51b97d6e2655ad65519163d4357b427672524d579a8724640a7d477e9dd82", 0xd1, 0x6}, {&(0x7f0000000700)="4b25666f192f365d91827889c52082bf7fc85315de1db9d0a4a953872dda26d2095d04e0b1640bd2b4ff3166433a310e8b2bae87e6eb96cb3dd3a14ec05b3b4f739f1f912d9d1f7e65b830a463a10e118e4de4b444aeeb9c6718e0d1f72abb118b47d4e5dde9ee884453aa587596f4ba864bc25dfceaad7dd69d6b824cdd23d8c148c8cef782d4e248afa1395a77947784c27c2b3af5ec8d5493aab43ec145a4ed42f159191e85124ac3f9c2b0c4f3f657ed2602ec04d4007b590f18a4421fac51b46078ae59315f33", 0xc9, 0xa}, {&(0x7f0000000800)="25d6b856f497b9d95b03b743b1229e4c4b56356514c0ec2723c40b02057c1229317da9705bc6d85061ff53403d790345ce1250aabf8728f3f07943e59fbf49e16935967f45", 0x45, 0x14bb8000000}, {&(0x7f0000000880)="40d772c8e35561cad35af1aee5958b1adb59bb51179ad9ca45", 0x19, 0x21}], 0x200000, &(0x7f0000000940)={[], [{@obj_user={'obj_user', 0x3d, ')'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]})
r1 = socket$inet6(0xa, 0x2, 0x8000009)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8901, 0x0)

05:54:08 executing program 5:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, 0x0)

05:54:08 executing program 0:
socket(0x2b, 0x0, 0x0)

05:54:08 executing program 4:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[{'$'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:08 executing program 3:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}, {'team0\x00'}, {'team0\x00'}, {}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:08 executing program 2:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:08 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @ethernet={0x306, @local}, @hci, @nfc={0x27, 0x1, 0x2, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='veth1\x00', 0x2, 0x0, 0x40})

05:54:08 executing program 0:
socket(0x2b, 0x0, 0x0)

05:54:08 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @ethernet={0x306, @local}, @hci, @nfc={0x27, 0x1, 0x2, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='veth1\x00', 0x2, 0x0, 0x40})

05:54:08 executing program 2:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:08 executing program 4:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:08 executing program 3:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}, {'team0\x00'}, {'team0\x00'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:08 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @ethernet={0x306, @local}, @hci, @nfc={0x27, 0x1, 0x2, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='veth1\x00', 0x2, 0x0, 0x40})

05:54:08 executing program 0:
socket(0x2b, 0x0, 0x0)

05:54:08 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8901, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x2400, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_ext={0x1c, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3ff}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x1, 0x3, 0xb, 0x1, 0x80, 0x8}, @exit, @alu={0x7, 0x1, 0x1, 0x4, 0x4, 0xfffffffffffffff0, 0xffffffffffffffff}]}, &(0x7f0000000080)='GPL\x00', 0x800, 0x17, &(0x7f00000000c0)=""/23, 0x40f00, 0x10, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0xf, 0xfe6, 0x1}, 0x10, 0x1c1a1, r1}, 0x78)

05:54:08 executing program 2:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

[ 2586.121856][ T9847] Bluetooth: hci3: command 0x0401 tx timeout
05:54:08 executing program 3:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}, {'team0\x00'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:08 executing program 4:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}]})

05:54:08 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x8000, 0x0)
ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f0000000240)=0x6)
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000280)='/dev/capi20\x00', 0x8582, 0x0)
ioctl$CAPI_SET_FLAGS(r1, 0x80044324, &(0x7f00000002c0)=0x1)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x5452, &(0x7f0000004e80)={'team0\x00'})
getitimer(0x0, &(0x7f0000000400))
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000))
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0xe8ad, 0x2, &(0x7f0000000140)=[{&(0x7f00000000c0)="8f5ce3e2d671f59ece5a15def0cd735363d70f", 0x13, 0x8}, {&(0x7f0000000100)="85ad45dc237b98a89667bbba1e5724b404ce5ea87dfc37", 0x17, 0x2}], 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}, {'team0\x00'}, {'team0\x00'}, {}, {'team0\x00'}, {'team0\x00'}, {'\xc9'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:08 executing program 1:
socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @ethernet={0x306, @local}, @hci, @nfc={0x27, 0x1, 0x2, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='veth1\x00', 0x2, 0x0, 0x40})

05:54:08 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x8000, 0x0)
ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f0000000240)=0x6)
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000280)='/dev/capi20\x00', 0x8582, 0x0)
ioctl$CAPI_SET_FLAGS(r1, 0x80044324, &(0x7f00000002c0)=0x1)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x5452, &(0x7f0000004e80)={'team0\x00'})
getitimer(0x0, &(0x7f0000000400))
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x14200, 0x0)
bind$can_raw(r2, &(0x7f00000003c0), 0x10)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000300)={{0x0, 0x9, 0x9, 0x2, 0x6, 0xbeb3, 0x0, 0xfffffff7, 0x0, 0x80, 0x80000001, 0x9, 0x7f, 0x6, 0x9}})
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0xe8ad, 0x2, &(0x7f0000000140)=[{&(0x7f00000000c0)="8f5ce3e2d671f59ece5a15def0cd735363d70f", 0x13, 0x8}, {&(0x7f0000000100)="85ad45dc237b98a89667bbba1e5724b404ce5ea87dfc37", 0x17, 0x2}], 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}, {'team0\x00'}, {'team0\x00'}, {}, {'team0\x00'}, {'team0\x00'}, {'\xc9'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:08 executing program 2:
syz_mount_image$cramfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:08 executing program 3:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:09 executing program 4:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}]})

05:54:09 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40414084}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffb}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x14)
r1 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8901, 0x0)

05:54:09 executing program 1:
socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @ethernet={0x306, @local}, @hci, @nfc={0x27, 0x1, 0x2, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='veth1\x00', 0x2, 0x0, 0x40})

05:54:09 executing program 2:
syz_mount_image$cramfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

[ 2586.574348][T25287] loop5: detected capacity change from 116 to 0
05:54:09 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40414084}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffb}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x14)
r1 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8901, 0x0)

05:54:09 executing program 3:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[{'$'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:09 executing program 4:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[], [{@uid_lt={'uid<', 0xee01}}]})

05:54:09 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x101000, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000180)={0x3ff, 0x80000001, 0x101})
syz_io_uring_setup(0x4000326c, &(0x7f0000000000)={0x0, 0x485a, 0x20, 0x2, 0x30c}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140))

05:54:09 executing program 2:
syz_mount_image$cramfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:09 executing program 1:
socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @ethernet={0x306, @local}, @hci, @nfc={0x27, 0x1, 0x2, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='veth1\x00', 0x2, 0x0, 0x40})

05:54:09 executing program 3:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:09 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40414084}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffb}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x14)
r1 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8901, 0x0)

05:54:09 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x101000, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000180)={0x3ff, 0x80000001, 0x101})
syz_io_uring_setup(0x4000326c, &(0x7f0000000000)={0x0, 0x485a, 0x20, 0x2, 0x30c}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140))

05:54:09 executing program 4:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180))

05:54:09 executing program 2:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', 0x0, 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:09 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0)

05:54:09 executing program 0:
syz_mount_image$cramfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:09 executing program 3:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}]})

05:54:09 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x9)
socket$can_raw(0x1d, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8901, 0x0)

05:54:09 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x101000, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000180)={0x3ff, 0x80000001, 0x101})
syz_io_uring_setup(0x4000326c, &(0x7f0000000000)={0x0, 0x485a, 0x20, 0x2, 0x30c}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140))

05:54:09 executing program 2:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', 0x0, 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:09 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0)

05:54:10 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x8000, 0x0)
ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f0000000240)=0x6)
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000280)='/dev/capi20\x00', 0x8582, 0x0)
ioctl$CAPI_SET_FLAGS(r1, 0x80044324, &(0x7f00000002c0)=0x1)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x5452, &(0x7f0000004e80)={'team0\x00'})
getitimer(0x0, &(0x7f0000000400))
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x14200, 0x0)
bind$can_raw(r2, &(0x7f00000003c0), 0x10)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000300)={{0x0, 0x9, 0x9, 0x2, 0x6, 0xbeb3, 0x0, 0xfffffff7, 0x0, 0x80, 0x80000001, 0x9, 0x7f, 0x6, 0x9}})
ioctl$CAPI_SET_FLAGS(r2, 0x80044324, &(0x7f0000000440))
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0xe8ad, 0x2, &(0x7f0000000140)=[{&(0x7f00000000c0)="8f5ce3e2d671f59ece5a15def0cd735363d70f", 0x13, 0x8}, {&(0x7f0000000100)="85ad45dc237b98a89667bbba1e5724b404ce5ea87dfc37", 0x17, 0x2}], 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}, {'team0\x00'}, {'team0\x00'}, {}, {'team0\x00'}, {'team0\x00'}, {'\xc9'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:10 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x101000, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000180)={0x3ff, 0x80000001, 0x101})

05:54:10 executing program 3:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}]})

05:54:10 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x9)
r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x200)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0xcb)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)

05:54:10 executing program 2:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', 0x0, 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[{'$'}, {'team0\x00'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:10 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0)

05:54:10 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)
ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000180)={0x3ff, 0x80000001, 0x101})

05:54:10 executing program 4:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0)

05:54:10 executing program 3:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[], [{@uid_lt={'uid<', 0xee01}}]})

05:54:10 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x7)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5452, &(0x7f0000004e80)={'team0\x00'})
sync()
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0x149)

05:54:10 executing program 2:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{'$'}, {'team0\x00'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:10 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @ethernet={0x0, @local}, @hci, @nfc={0x27, 0x1, 0x2, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='veth1\x00', 0x2, 0x0, 0x40})

05:54:10 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)
ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000180)={0x3ff, 0x80000001, 0x101})

05:54:10 executing program 3:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180))

05:54:10 executing program 4:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @ethernet={0x1, @broadcast}, @nfc={0x27, 0x0, 0x1, 0x1}, @isdn={0x22, 0x3, 0x5, 0x1, 0x9}, 0x5029, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0xbd, 0xc255})

05:54:10 executing program 2:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{'$'}, {'team0\x00'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:10 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @ethernet={0x0, @local}, @hci, @nfc={0x27, 0x0, 0x2, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='veth1\x00', 0x2, 0x0, 0x40})

05:54:10 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8901, 0x0)
r2 = socket(0x8, 0x800, 0x9)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x7, 0x1, 0x2, 0x2, {{0x16, 0x4, 0x2, 0x9, 0x58, 0x64, 0x0, 0x0, 0x2f, 0x0, @private=0xa010102, @multicast1, {[@timestamp={0x44, 0x8, 0x77, 0x0, 0x8, [0x0]}, @timestamp_addr={0x44, 0x3c, 0x81, 0x1, 0x4, [{@multicast2, 0x4}, {@local, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x401}, {@broadcast, 0x7}, {@multicast1}, {@multicast1, 0x2}, {@rand_addr=0x64010101, 0x7}]}]}}}}})
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r3}, 0x10)

[ 2588.191550][ T9487] Bluetooth: hci3: command 0x0401 tx timeout
05:54:10 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)
ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000180)={0x3ff, 0x80000001, 0x101})

05:54:10 executing program 4:
socket$inet6(0xa, 0x3, 0x9)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x52000, 0x0)
times(&(0x7f0000000140))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x515903, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioprio_set$pid(0x2, 0xffffffffffffffff, 0x4007)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5452, &(0x7f0000000000)={'team0\x00'})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0xa00, 0x0)
ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000001c0)={0x4, 0x0, "862cf3", 0x1f, 0x3})

05:54:10 executing program 0:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, 0x1000})
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00')

05:54:10 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @ethernet={0x0, @local}, @hci, @nfc={0x27, 0x0, 0x0, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='veth1\x00', 0x2, 0x0, 0x40})

05:54:11 executing program 3:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, 0x1000})
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00')

05:54:11 executing program 2:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{'$'}, {'team0\x00'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:11 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x101000, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000180)={0x3ff, 0x80000001, 0x101})

05:54:11 executing program 4:
socket$inet6(0xa, 0x3, 0x9)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x52000, 0x0)
times(&(0x7f0000000140))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x515903, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioprio_set$pid(0x2, 0xffffffffffffffff, 0x4007)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5452, &(0x7f0000000000)={'team0\x00'})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0xa00, 0x0)
ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000001c0)={0x4, 0x0, "862cf3", 0x1f, 0x3})

05:54:11 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @ethernet={0x0, @local}, @hci, @nfc, 0x7, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='veth1\x00', 0x2, 0x0, 0x40})

05:54:11 executing program 0:
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x11)
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0x2, &(0x7f0000000000)="2f3f46dcad12b780f944543de40336a53505668cd98da54d7f974bcf458ade81a770fdacb0189c8ad37534276ee338873af4e3a9836f1ca9de892a7822c48791b856be652f5dd0ce8c876a7435f9f746cde4ceb3f68770caaf7f7e90b4c91ace4a73f0d2e09ca87afd47e1b9b7f775ff8d277aea14e047efed7d858cb7e7bd2ecfe0b89482b5291839d3cadaf9a3dec8862fc75430c699183125ef5b923cc660a8cc35b5c8a01b4b28aa6fb693d4613230b4f48993f295cd938dea7e8c74eef5889107712478da4e"})
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00')
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x401}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x8000)
socket$inet6(0xa, 0x12, 0x0)

05:54:11 executing program 5:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x101000, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000180)={0x3ff, 0x80000001, 0x101})

05:54:11 executing program 3:
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x11)
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0x2, &(0x7f0000000000)="2f3f46dcad12b780f944543de40336a53505668cd98da54d7f974bcf458ade81a770fdacb0189c8ad37534276ee338873af4e3a9836f1ca9de892a7822c48791b856be652f5dd0ce8c876a7435f9f746cde4ceb3f68770caaf7f7e90b4c91ace4a73f0d2e09ca87afd47e1b9b7f775ff8d277aea14e047efed7d858cb7e7bd2ecfe0b89482b5291839d3cadaf9a3dec8862fc75430c699183125ef5b923cc660a8cc35b5c8a01b4b28aa6fb693d4613230b4f48993f295cd938dea7e8c74eef5889107712478da4e"})
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00')
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x401}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x8000)
socket$inet6(0xa, 0x12, 0x0)

05:54:11 executing program 2:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, 0x0)

05:54:11 executing program 5:
r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000180)={0x3ff, 0x80000001, 0x101})

05:54:11 executing program 0:
socket$inet6(0xa, 0x3, 0x9)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8904, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/4, 0x4}, {&(0x7f0000000100)=""/61, 0x3d}], 0x2, &(0x7f0000000140)=""/83, 0x53}, 0x40002140)
ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000002c0))
getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f00000001c0), &(0x7f0000000240)=0x4)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:11 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @ethernet={0x0, @local}, @hci, @nfc, 0x7, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='veth1\x00', 0x2, 0x0, 0x40})

05:54:11 executing program 4:
socket$inet6(0xa, 0x3, 0x9)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x52000, 0x0)
times(&(0x7f0000000140))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x515903, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioprio_set$pid(0x2, 0xffffffffffffffff, 0x4007)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5452, &(0x7f0000000000)={'team0\x00'})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0xa00, 0x0)
ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000001c0)={0x4, 0x0, "862cf3", 0x1f, 0x3})

05:54:11 executing program 3:
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x11)
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0x2, &(0x7f0000000000)="2f3f46dcad12b780f944543de40336a53505668cd98da54d7f974bcf458ade81a770fdacb0189c8ad37534276ee338873af4e3a9836f1ca9de892a7822c48791b856be652f5dd0ce8c876a7435f9f746cde4ceb3f68770caaf7f7e90b4c91ace4a73f0d2e09ca87afd47e1b9b7f775ff8d277aea14e047efed7d858cb7e7bd2ecfe0b89482b5291839d3cadaf9a3dec8862fc75430c699183125ef5b923cc660a8cc35b5c8a01b4b28aa6fb693d4613230b4f48993f295cd938dea7e8c74eef5889107712478da4e"})
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00')
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x401}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x8000)
socket$inet6(0xa, 0x12, 0x0)

05:54:11 executing program 2:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, 0x0)

05:54:11 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @ethernet={0x0, @local}, @hci, @nfc, 0x7, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='veth1\x00', 0x2, 0x0, 0x40})

05:54:11 executing program 5:
r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000180)={0x3ff, 0x80000001, 0x101})

05:54:11 executing program 0:
socket$inet6(0xa, 0x3, 0x9)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8904, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/4, 0x4}, {&(0x7f0000000100)=""/61, 0x3d}], 0x2, &(0x7f0000000140)=""/83, 0x53}, 0x40002140)
ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000002c0))
getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f00000001c0), &(0x7f0000000240)=0x4)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:11 executing program 4:
socket$inet6(0xa, 0x3, 0x9)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x52000, 0x0)
times(&(0x7f0000000140))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x515903, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioprio_set$pid(0x2, 0xffffffffffffffff, 0x4007)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5452, &(0x7f0000000000)={'team0\x00'})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1})
openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0xa00, 0x0)

05:54:11 executing program 3:
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x11)
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0x2, &(0x7f0000000000)="2f3f46dcad12b780f944543de40336a53505668cd98da54d7f974bcf458ade81a770fdacb0189c8ad37534276ee338873af4e3a9836f1ca9de892a7822c48791b856be652f5dd0ce8c876a7435f9f746cde4ceb3f68770caaf7f7e90b4c91ace4a73f0d2e09ca87afd47e1b9b7f775ff8d277aea14e047efed7d858cb7e7bd2ecfe0b89482b5291839d3cadaf9a3dec8862fc75430c699183125ef5b923cc660a8cc35b5c8a01b4b28aa6fb693d4613230b4f48993f295cd938dea7e8c74eef5889107712478da4e"})
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00')
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x401}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x8000)
socket$inet6(0xa, 0x12, 0x0)

05:54:11 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @ethernet={0x0, @local}, @hci, @nfc={0x27, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='veth1\x00', 0x2, 0x0, 0x40})

05:54:11 executing program 2:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, 0x0)

05:54:11 executing program 5:
r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000180)={0x3ff, 0x80000001, 0x101})

05:54:11 executing program 0:
socket$inet6(0xa, 0x3, 0x9)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8904, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/4, 0x4}, {&(0x7f0000000100)=""/61, 0x3d}], 0x2, &(0x7f0000000140)=""/83, 0x53}, 0x40002140)
ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000002c0))
getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f00000001c0), &(0x7f0000000240)=0x4)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:12 executing program 4:
socket$inet6(0xa, 0x3, 0x9)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x52000, 0x0)
times(&(0x7f0000000140))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x515903, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioprio_set$pid(0x2, 0xffffffffffffffff, 0x4007)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5452, &(0x7f0000000000)={'team0\x00'})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1})

05:54:12 executing program 3:
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x11)
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0x2, &(0x7f0000000000)="2f3f46dcad12b780f944543de40336a53505668cd98da54d7f974bcf458ade81a770fdacb0189c8ad37534276ee338873af4e3a9836f1ca9de892a7822c48791b856be652f5dd0ce8c876a7435f9f746cde4ceb3f68770caaf7f7e90b4c91ace4a73f0d2e09ca87afd47e1b9b7f775ff8d277aea14e047efed7d858cb7e7bd2ecfe0b89482b5291839d3cadaf9a3dec8862fc75430c699183125ef5b923cc660a8cc35b5c8a01b4b28aa6fb693d4613230b4f48993f295cd938dea7e8c74eef5889107712478da4e"})
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00')
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x401}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x8000)

05:54:12 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @ethernet={0x0, @local}, @hci, @nfc={0x27, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='veth1\x00', 0x2, 0x0, 0x40})

05:54:12 executing program 5:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000180)={0x3ff, 0x80000001, 0x101})

05:54:12 executing program 2:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[{'$'}], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:12 executing program 0:
socket$inet6(0xa, 0x3, 0x9)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8904, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/4, 0x4}, {&(0x7f0000000100)=""/61, 0x3d}], 0x2, &(0x7f0000000140)=""/83, 0x53}, 0x40002140)
ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000002c0))
getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f00000001c0), &(0x7f0000000240)=0x4)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:12 executing program 4:
socket$inet6(0xa, 0x3, 0x9)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x52000, 0x0)
times(&(0x7f0000000140))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x515903, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioprio_set$pid(0x2, 0xffffffffffffffff, 0x4007)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5452, &(0x7f0000000000)={'team0\x00'})

05:54:12 executing program 3:
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x11)
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0x2, &(0x7f0000000000)="2f3f46dcad12b780f944543de40336a53505668cd98da54d7f974bcf458ade81a770fdacb0189c8ad37534276ee338873af4e3a9836f1ca9de892a7822c48791b856be652f5dd0ce8c876a7435f9f746cde4ceb3f68770caaf7f7e90b4c91ace4a73f0d2e09ca87afd47e1b9b7f775ff8d277aea14e047efed7d858cb7e7bd2ecfe0b89482b5291839d3cadaf9a3dec8862fc75430c699183125ef5b923cc660a8cc35b5c8a01b4b28aa6fb693d4613230b4f48993f295cd938dea7e8c74eef5889107712478da4e"})
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00')

05:54:12 executing program 5:
openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000180)={0x3ff, 0x80000001, 0x101})

05:54:12 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @ethernet={0x0, @local}, @hci, @nfc={0x27, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40})

05:54:12 executing program 0:
socket$inet6(0xa, 0x3, 0x9)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8904, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/4, 0x4}, {&(0x7f0000000100)=""/61, 0x3d}], 0x2, &(0x7f0000000140)=""/83, 0x53}, 0x40002140)
ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000002c0))
getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f00000001c0), &(0x7f0000000240)=0x4)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:12 executing program 2:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@measure='measure'}]})

05:54:12 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @ethernet={0x0, @local}, @hci, @nfc={0x27, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40})

05:54:12 executing program 5:
openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000180)={0x3ff, 0x80000001, 0x101})

05:54:12 executing program 4:
socket$inet6(0xa, 0x3, 0x9)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x52000, 0x0)
times(&(0x7f0000000140))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x515903, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioprio_set$pid(0x2, 0xffffffffffffffff, 0x4007)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))

05:54:12 executing program 3:
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x11)
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0x2, &(0x7f0000000000)="2f3f46dcad12b780f944543de40336a53505668cd98da54d7f974bcf458ade81a770fdacb0189c8ad37534276ee338873af4e3a9836f1ca9de892a7822c48791b856be652f5dd0ce8c876a7435f9f746cde4ceb3f68770caaf7f7e90b4c91ace4a73f0d2e09ca87afd47e1b9b7f775ff8d277aea14e047efed7d858cb7e7bd2ecfe0b89482b5291839d3cadaf9a3dec8862fc75430c699183125ef5b923cc660a8cc35b5c8a01b4b28aa6fb693d4613230b4f48993f295cd938dea7e8c74eef5889107712478da4e"})
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))

05:54:12 executing program 2:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}, {@fowner_eq={'fowner'}}]})

05:54:12 executing program 0:
socket$inet6(0xa, 0x3, 0x9)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8904, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/4, 0x4}, {&(0x7f0000000100)=""/61, 0x3d}], 0x2, &(0x7f0000000140)=""/83, 0x53}, 0x40002140)
ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000002c0))
getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f00000001c0), &(0x7f0000000240)=0x4)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:12 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @ethernet={0x0, @local}, @hci, @nfc={0x27, 0x0, 0x0, 0x4}})

05:54:12 executing program 4:
socket$inet6(0xa, 0x3, 0x9)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x52000, 0x0)
times(&(0x7f0000000140))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x515903, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioprio_set$pid(0x2, 0xffffffffffffffff, 0x4007)

05:54:12 executing program 5:
openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000180)={0x3ff, 0x80000001, 0x101})

05:54:12 executing program 3:
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x11)
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0x2, &(0x7f0000000000)="2f3f46dcad12b780f944543de40336a53505668cd98da54d7f974bcf458ade81a770fdacb0189c8ad37534276ee338873af4e3a9836f1ca9de892a7822c48791b856be652f5dd0ce8c876a7435f9f746cde4ceb3f68770caaf7f7e90b4c91ace4a73f0d2e09ca87afd47e1b9b7f775ff8d277aea14e047efed7d858cb7e7bd2ecfe0b89482b5291839d3cadaf9a3dec8862fc75430c699183125ef5b923cc660a8cc35b5c8a01b4b28aa6fb693d4613230b4f48993f295cd938dea7e8c74eef5889107712478da4e"})
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)

05:54:12 executing program 2:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[], [{@uid_lt={'uid<', 0xee01}}, {@measure='measure'}]})

[ 2590.281310][T31771] Bluetooth: hci3: command 0x0401 tx timeout
05:54:12 executing program 0:
socket$inet6(0xa, 0x3, 0x9)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8904, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/4, 0x4}, {&(0x7f0000000100)=""/61, 0x3d}], 0x2, &(0x7f0000000140)=""/83, 0x53}, 0x40002140)
ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000002c0))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:12 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, 0x0)

05:54:13 executing program 5:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0)

05:54:13 executing program 4:
socket$inet6(0xa, 0x3, 0x9)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x52000, 0x0)
times(&(0x7f0000000140))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x515903, 0x0)
ioprio_set$pid(0x2, 0xffffffffffffffff, 0x4007)

05:54:13 executing program 3:
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x11)
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0x2, &(0x7f0000000000)="2f3f46dcad12b780f944543de40336a53505668cd98da54d7f974bcf458ade81a770fdacb0189c8ad37534276ee338873af4e3a9836f1ca9de892a7822c48791b856be652f5dd0ce8c876a7435f9f746cde4ceb3f68770caaf7f7e90b4c91ace4a73f0d2e09ca87afd47e1b9b7f775ff8d277aea14e047efed7d858cb7e7bd2ecfe0b89482b5291839d3cadaf9a3dec8862fc75430c699183125ef5b923cc660a8cc35b5c8a01b4b28aa6fb693d4613230b4f48993f295cd938dea7e8c74eef5889107712478da4e"})

05:54:13 executing program 2:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180)={[], [{@uid_lt={'uid<', 0xee01}}]})

05:54:13 executing program 0:
socket$inet6(0xa, 0x3, 0x9)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8904, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/4, 0x4}, {&(0x7f0000000100)=""/61, 0x3d}], 0x2, &(0x7f0000000140)=""/83, 0x53}, 0x40002140)
ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000002c0))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:13 executing program 5:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0)

05:54:13 executing program 1:
socket$inet6(0xa, 0x3, 0x9)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8904, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/4, 0x4}, {&(0x7f0000000100)=""/61, 0x3d}], 0x2, &(0x7f0000000140)=""/83, 0x53}, 0x40002140)
ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000002c0))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:13 executing program 4:
socket$inet6(0xa, 0x3, 0x9)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x52000, 0x0)
times(&(0x7f0000000140))
ioprio_set$pid(0x2, 0xffffffffffffffff, 0x4007)

05:54:13 executing program 3:
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x11)

05:54:13 executing program 0:
socket$inet6(0xa, 0x3, 0x9)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8904, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/4, 0x4}, {&(0x7f0000000100)=""/61, 0x3d}], 0x2, &(0x7f0000000140)=""/83, 0x53}, 0x40002140)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:13 executing program 2:
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80407, &(0x7f0000000180))

05:54:13 executing program 5:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0)

05:54:13 executing program 1:
socket$inet6(0xa, 0x3, 0x9)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8904, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/4, 0x4}, {&(0x7f0000000100)=""/61, 0x3d}], 0x2, &(0x7f0000000140)=""/83, 0x53}, 0x40002140)
ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000002c0))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:13 executing program 4:
socket$inet6(0xa, 0x3, 0x9)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x52000, 0x0)
ioprio_set$pid(0x2, 0xffffffffffffffff, 0x4007)

05:54:13 executing program 3:
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0)

05:54:13 executing program 0:
socket$inet6(0xa, 0x3, 0x9)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8904, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:13 executing program 2:
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000001c0)=@raw=[@jmp={0x5, 0x0, 0xa, 0x1, 0x5, 0x56, 0xfffffffffffffffc}], &(0x7f0000000200)='syzkaller\x00', 0x20, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x22bc2}, 0xfdb8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0xc, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4}, @jmp={0x5, 0x0, 0x7, 0x8, 0xa, 0xffffffffffffffe0, 0x4}, @call={0x85, 0x0, 0x0, 0x62}, @call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x1a}, @map={0x18, 0x6}, @generic={0x1, 0x3, 0x1, 0x3, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], &(0x7f0000000080)='syzkaller\x00', 0x21, 0x43, &(0x7f00000000c0)=""/67, 0x40f00, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x6, 0x7dc, 0x3}, 0x10, 0x6e86, r0}, 0x78)
r1 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8901, 0x0)

05:54:13 executing program 5:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000180)={0x0, 0x80000001, 0x101})

05:54:13 executing program 1:
socket$inet6(0xa, 0x3, 0x9)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8904, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/4, 0x4}, {&(0x7f0000000100)=""/61, 0x3d}], 0x2, &(0x7f0000000140)=""/83, 0x53}, 0x40002140)
ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000002c0))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:13 executing program 4:
socket$inet6(0xa, 0x3, 0x9)
ioprio_set$pid(0x2, 0xffffffffffffffff, 0x4007)

05:54:13 executing program 3:
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0)

05:54:13 executing program 0:
socket$inet6(0xa, 0x3, 0x9)
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:13 executing program 2:
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000001c0)=@raw=[@jmp={0x5, 0x0, 0xa, 0x1, 0x5, 0x56, 0xfffffffffffffffc}], &(0x7f0000000200)='syzkaller\x00', 0x20, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x22bc2}, 0xfdb8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0xc, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4}, @jmp={0x5, 0x0, 0x7, 0x8, 0xa, 0xffffffffffffffe0, 0x4}, @call={0x85, 0x0, 0x0, 0x62}, @call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x1a}, @map={0x18, 0x6}, @generic={0x1, 0x3, 0x1, 0x3, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], &(0x7f0000000080)='syzkaller\x00', 0x21, 0x43, &(0x7f00000000c0)=""/67, 0x40f00, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x6, 0x7dc, 0x3}, 0x10, 0x6e86, r0}, 0x78)
r1 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8901, 0x0)

05:54:13 executing program 5:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000180)={0x0, 0x0, 0x101})

05:54:13 executing program 1:
socket$inet6(0xa, 0x3, 0x9)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8904, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/4, 0x4}, {&(0x7f0000000100)=""/61, 0x3d}], 0x2, &(0x7f0000000140)=""/83, 0x53}, 0x40002140)
ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000002c0))
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:13 executing program 4:
ioprio_set$pid(0x2, 0xffffffffffffffff, 0x4007)

05:54:14 executing program 3:
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0)

05:54:14 executing program 0:
socket$inet6(0xa, 0x3, 0x9)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:14 executing program 2:
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000001c0)=@raw=[@jmp={0x5, 0x0, 0xa, 0x1, 0x5, 0x56, 0xfffffffffffffffc}], &(0x7f0000000200)='syzkaller\x00', 0x20, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x22bc2}, 0xfdb8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0xc, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4}, @jmp={0x5, 0x0, 0x7, 0x8, 0xa, 0xffffffffffffffe0, 0x4}, @call={0x85, 0x0, 0x0, 0x62}, @call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x1a}, @map={0x18, 0x6}, @generic={0x1, 0x3, 0x1, 0x3, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], &(0x7f0000000080)='syzkaller\x00', 0x21, 0x43, &(0x7f00000000c0)=""/67, 0x40f00, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x6, 0x7dc, 0x3}, 0x10, 0x6e86, r0}, 0x78)
r1 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8901, 0x0)

05:54:14 executing program 1:
socket$inet6(0xa, 0x3, 0x9)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8904, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/4, 0x4}, {&(0x7f0000000100)=""/61, 0x3d}], 0x2, &(0x7f0000000140)=""/83, 0x53}, 0x40002140)
ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000002c0))
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:14 executing program 4:
ioprio_set$pid(0x0, 0xffffffffffffffff, 0x4007)

05:54:14 executing program 5:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000180))

05:54:14 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000180)={0x0, 0x80000001, 0x101})

05:54:14 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:14 executing program 2:
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000001c0)=@raw=[@jmp={0x5, 0x0, 0xa, 0x1, 0x5, 0x56, 0xfffffffffffffffc}], &(0x7f0000000200)='syzkaller\x00', 0x20, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x22bc2}, 0xfdb8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0xc, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4}, @jmp={0x5, 0x0, 0x7, 0x8, 0xa, 0xffffffffffffffe0, 0x4}, @call={0x85, 0x0, 0x0, 0x62}, @call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x1a}, @map={0x18, 0x6}, @generic={0x1, 0x3, 0x1, 0x3, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], &(0x7f0000000080)='syzkaller\x00', 0x21, 0x43, &(0x7f00000000c0)=""/67, 0x40f00, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x6, 0x7dc, 0x3}, 0x10, 0x6e86, r0}, 0x78)
socket$inet6(0xa, 0x3, 0x9)

05:54:14 executing program 1:
socket$inet6(0xa, 0x3, 0x9)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8904, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/4, 0x4}, {&(0x7f0000000100)=""/61, 0x3d}], 0x2, &(0x7f0000000140)=""/83, 0x53}, 0x40002140)
ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000002c0))
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:14 executing program 4:
ioprio_set$pid(0x0, 0xffffffffffffffff, 0x4007)

05:54:14 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000180)={0x0, 0x80000001, 0x101})

05:54:14 executing program 5:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000180))

05:54:14 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:14 executing program 2:
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000001c0)=@raw=[@jmp={0x5, 0x0, 0xa, 0x1, 0x5, 0x56, 0xfffffffffffffffc}], &(0x7f0000000200)='syzkaller\x00', 0x20, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x22bc2}, 0xfdb8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0xc, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4}, @jmp={0x5, 0x0, 0x7, 0x8, 0xa, 0xffffffffffffffe0, 0x4}, @call={0x85, 0x0, 0x0, 0x62}, @call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x1a}, @map={0x18, 0x6}, @generic={0x1, 0x3, 0x1, 0x3, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], &(0x7f0000000080)='syzkaller\x00', 0x21, 0x43, &(0x7f00000000c0)=""/67, 0x40f00, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x6, 0x7dc, 0x3}, 0x10, 0x6e86, r0}, 0x78)

05:54:14 executing program 1:
socket$inet6(0xa, 0x3, 0x9)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8904, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/4, 0x4}, {&(0x7f0000000100)=""/61, 0x3d}], 0x2, &(0x7f0000000140)=""/83, 0x53}, 0x40002140)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:14 executing program 4:
ioprio_set$pid(0x0, 0xffffffffffffffff, 0x4007)

05:54:14 executing program 5:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000180))

05:54:14 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000180)={0x0, 0x80000001, 0x101})

05:54:14 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:14 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000001c0)=@raw=[@jmp={0x5, 0x0, 0xa, 0x1, 0x5, 0x56, 0xfffffffffffffffc}], &(0x7f0000000200)='syzkaller\x00', 0x20, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x22bc2}, 0xfdb8)

[ 2592.351248][T31771] Bluetooth: hci3: command 0x0401 tx timeout
05:54:14 executing program 4:
ioprio_set$pid(0x2, 0xffffffffffffffff, 0x0)

05:54:14 executing program 1:
socket$inet6(0xa, 0x3, 0x9)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8904, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:15 executing program 3:
ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000180)={0x0, 0x80000001, 0x101})

05:54:15 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:15 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:15 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)

05:54:15 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8}, 0x0)

05:54:15 executing program 1:
socket$inet6(0xa, 0x3, 0x9)
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:15 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)

05:54:15 executing program 3:
ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000180)={0x0, 0x80000001, 0x101})

05:54:15 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:15 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)

05:54:15 executing program 4:
socket$inet6(0xa, 0x3, 0x9)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8904, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:15 executing program 1:
socket$inet6(0xa, 0x3, 0x9)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:15 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)

05:54:15 executing program 3:
ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000180)={0x0, 0x80000001, 0x101})

05:54:15 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:15 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)

05:54:15 executing program 4:
timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f00000000c0))
timer_settime(0x0, 0x0, 0x0, 0x0)

05:54:15 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)

05:54:15 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000180)={0x0, 0x80000001, 0x101})

05:54:15 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:15 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:15 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x20, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x22bc2}, 0x78)

05:54:15 executing program 4:
socket$inet6(0xa, 0x12, 0x0)
r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000)
syz_io_uring_setup(0x4d0c, &(0x7f0000000000)={0x0, 0xc00e, 0x1, 0x0, 0x325}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=<r1=>0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000100), &(0x7f0000000200)='./file0\x00', 0x40, 0x1000, 0x1}, 0x431b)
r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vim2m\x00', 0x2, 0x0)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000080))
mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x100010, r4, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f00000002c0))

05:54:15 executing program 0:
socket$inet6(0xa, 0x3, 0x9)
socket$vsock_stream(0x28, 0x1, 0x0)
keyctl$join(0x1, 0x0)
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2, @raw_data="f66312eb2f550352230c980a22abe410b5438bba1464570b19f95b56d58e7cc9134917ecc356a6f8cea5eb0711ab7b5af0a85c731b312d5d66321dd71aaafdab0b23143ef25506f4c7c82e0af2786c715be8c145fe075a0dced162bb13b03fc1142bf24621fb70ec6d6a65f34bdd8825e87af5a236cc67c46fcffea509854d1407097f9fca0ed3ba513b7f54e714093392a9adef1361885be31ade2803baf18223337d129a711e3fb70bf5deef41dc8888d56e0014b4e0b2091366219c0859b0ed6a3ed87180fc08"})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8901, 0x0)
r4 = socket(0x25, 0x3, 0x1)
bind$vsock_stream(r4, &(0x7f00000023c0)={0x28, 0x0, 0x0, @host}, 0x10)

05:54:15 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:15 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000180)={0x0, 0x80000001, 0x101})

05:54:15 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:16 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x20, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x22bc2}, 0x78)

05:54:16 executing program 4:
openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vim2m\x00', 0x2, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x412000, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x10000, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x4, 0x28, &(0x7f0000000180)=""/40, 0x40f00, 0x8, [], 0x0, 0x1c, r1, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a, r2}, 0x78)
socket$inet6(0xa, 0x12, 0x8)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000340)={0x0, 0x8d349b55, 0x0, &(0x7f0000000300)=0x7fffffff})

05:54:16 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:16 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:16 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000180)={0x0, 0x80000001, 0x101})

05:54:16 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x736a, 0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8901, 0x0)

05:54:16 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x20, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x22bc2}, 0x78)

05:54:16 executing program 4:
openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vim2m\x00', 0x2, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x412000, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x10000, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x4, 0x28, &(0x7f0000000180)=""/40, 0x40f00, 0x8, [], 0x0, 0x1c, r1, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a, r2}, 0x78)
socket$inet6(0xa, 0x12, 0x8)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000340)={0x0, 0x8d349b55, 0x0, &(0x7f0000000300)=0x7fffffff})

05:54:16 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:16 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:16 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x736a, 0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8901, 0x0)

05:54:16 executing program 3:
openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000180)={0x0, 0x80000001, 0x101})

05:54:16 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x0, &(0x7f00000001c0), &(0x7f0000000200)='syzkaller\x00', 0x20, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x22bc2}, 0x78)

05:54:16 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)

05:54:16 executing program 4:
openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vim2m\x00', 0x2, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x412000, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x10000, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x4, 0x28, &(0x7f0000000180)=""/40, 0x40f00, 0x8, [], 0x0, 0x1c, r1, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a, r2}, 0x78)
socket$inet6(0xa, 0x12, 0x8)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000340)={0x0, 0x8d349b55, 0x0, &(0x7f0000000300)=0x7fffffff})

05:54:16 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:16 executing program 3:
openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000180)={0x0, 0x80000001, 0x101})

05:54:16 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x736a, 0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8901, 0x0)

05:54:16 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)

05:54:16 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x0, &(0x7f00000001c0), &(0x7f0000000200)='syzkaller\x00', 0x20, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x22bc2}, 0x78)

05:54:16 executing program 3:
openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000180)={0x0, 0x80000001, 0x101})

05:54:16 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:16 executing program 4:
openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vim2m\x00', 0x2, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x412000, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x10000, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x4, 0x28, &(0x7f0000000180)=""/40, 0x40f00, 0x8, [], 0x0, 0x1c, r1, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a, r2}, 0x78)
socket$inet6(0xa, 0x12, 0x8)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

05:54:16 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x736a, 0x4)

05:54:17 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)

[ 2594.431097][T16619] Bluetooth: hci3: command 0x0401 tx timeout
05:54:17 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x0, &(0x7f00000001c0), &(0x7f0000000200)='syzkaller\x00', 0x20, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x22bc2}, 0x78)

05:54:17 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0)

05:54:17 executing program 4:
openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vim2m\x00', 0x2, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x412000, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x10000, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x4, 0x28, &(0x7f0000000180)=""/40, 0x40f00, 0x8, [], 0x0, 0x1c, r1, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a, r2}, 0x78)
socket$inet6(0xa, 0x12, 0x8)

05:54:17 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:17 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00'})

05:54:17 executing program 0:
setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x736a, 0x4)

05:54:17 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000001c0)=@raw=[@jmp={0x5, 0x0, 0x0, 0x1, 0x5, 0x56, 0xfffffffffffffffc}], &(0x7f0000000200)='syzkaller\x00', 0x20, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x22bc2}, 0xfdb8)

05:54:17 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)

05:54:17 executing program 4:
openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vim2m\x00', 0x2, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x412000, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x10000, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x4, 0x28, &(0x7f0000000180)=""/40, 0x40f00, 0x8, [], 0x0, 0x1c, r1, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a, r2}, 0x78)

05:54:17 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0)

05:54:17 executing program 0:
setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x736a, 0x4)

05:54:17 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100000}, @rc={0x1f, @fixed={[], 0x12}, 0x4}, @qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d4, 0x1, 0x2})
r1 = socket(0x6, 0x80000, 0x8000)
clock_gettime(0x0, &(0x7f0000000580)={<r2=>0x0, <r3=>0x0})
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000005c0)={r2, r3/1000+60000}, 0x10)
mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x300000c, 0x4000010, 0xffffffffffffffff, 0x80000000)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5452, &(0x7f0000004e80)={'team0\x00'})
clock_gettime(0x2, &(0x7f00000000c0))

05:54:17 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000001c0)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x5, 0x56, 0xfffffffffffffffc}], &(0x7f0000000200)='syzkaller\x00', 0x20, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x22bc2}, 0xfdb8)

05:54:17 executing program 4:
openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vim2m\x00', 0x2, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x412000, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x10000, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x4, 0x28, &(0x7f0000000180)=""/40, 0x40f00, 0x8, [], 0x0, 0x1c, r1, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a, r2}, 0x78)

05:54:17 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)

05:54:17 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0)

05:54:17 executing program 0:
setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x736a, 0x4)

05:54:17 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100000}, @rc={0x1f, @fixed={[], 0x12}, 0x4}, @qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d4, 0x1, 0x2})
r1 = socket(0x6, 0x80000, 0x8000)
clock_gettime(0x0, &(0x7f0000000580)={<r2=>0x0, <r3=>0x0})
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000005c0)={r2, r3/1000+60000}, 0x10)
mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x300000c, 0x4000010, 0xffffffffffffffff, 0x80000000)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5452, &(0x7f0000004e80)={'team0\x00'})
clock_gettime(0x2, &(0x7f00000000c0))

05:54:17 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000001c0)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x56, 0xfffffffffffffffc}], &(0x7f0000000200)='syzkaller\x00', 0x20, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x22bc2}, 0xfdb8)

05:54:17 executing program 4:
openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vim2m\x00', 0x2, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x412000, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x10000, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x4, 0x28, &(0x7f0000000180)=""/40, 0x40f00, 0x8, [], 0x0, 0x1c, r1, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a, r2}, 0x78)

05:54:17 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)

05:54:17 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000180)={0x0, 0x0, 0x101})

05:54:17 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000001c0)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}], &(0x7f0000000200)='syzkaller\x00', 0x20, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x22bc2}, 0xfdb8)

05:54:18 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100000}, @rc={0x1f, @fixed={[], 0x12}, 0x4}, @qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d4, 0x1, 0x2})
r1 = socket(0x6, 0x80000, 0x8000)
clock_gettime(0x0, &(0x7f0000000580)={<r2=>0x0, <r3=>0x0})
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000005c0)={r2, r3/1000+60000}, 0x10)
mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x300000c, 0x4000010, 0xffffffffffffffff, 0x80000000)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5452, &(0x7f0000004e80)={'team0\x00'})
clock_gettime(0x2, &(0x7f00000000c0))

05:54:18 executing program 0:
r0 = socket$inet6(0xa, 0x0, 0x9)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x736a, 0x4)

05:54:18 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x9)
getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000680)={0x0, @sco={0x1f, @fixed={[], 0x11}}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2}, @xdp={0x2c, 0xb, <r2=>0x0, 0x12}, 0x8, 0x0, 0x0, 0x0, 0xa046, 0x0, 0x717, 0xfffffffffffffffb, 0xfb0b})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d40)={'team0\x00', <r3=>0x0})
openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d80)={'team0\x00', <r4=>0x0})
syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x7ff, 0x2)
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000080)={0x2, &(0x7f0000000000)="a23d15d4ae57f2dfd2c377ba23c753954109043dad52ddf0481799515393b90b300293f22a5f1f5b26c2560a9045af0a5dcda3bd90421eaffb4f2b544068be135b4c8e89cd22a1db5d661a88d827570571cdf2"})
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001140)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001100)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="14030000", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fedadf250000000008000500", @ANYRES32=r2, @ANYBLOB="1401028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400420000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="5c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c000400fc85801f70f5ffff3bfffe0007000000c100060200000000000020000008000040000540f7ffffff400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004007c00000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040007000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000400000008000100", @ANYRES32=0x0, @ANYBLOB="7c0002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="9000028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="08000700000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000"], 0x314}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8901, 0x0)

05:54:18 executing program 4:
openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vim2m\x00', 0x2, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x412000, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x10000, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x4, 0x28, &(0x7f0000000180)=""/40, 0x40f00, 0x8, [], 0x0, 0x1c, r1, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a, r2}, 0x78)

05:54:18 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000180))

05:54:18 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000001c0)=@raw=[@jmp], &(0x7f0000000200)='syzkaller\x00', 0x20, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x22bc2}, 0xfdb8)

05:54:18 executing program 0:
r0 = socket$inet6(0xa, 0x0, 0x9)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x736a, 0x4)

05:54:18 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100000}, @rc={0x1f, @fixed={[], 0x12}, 0x4}, @qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d4, 0x1, 0x2})
r1 = socket(0x6, 0x80000, 0x8000)
clock_gettime(0x0, &(0x7f0000000580)={<r2=>0x0, <r3=>0x0})
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000005c0)={r2, r3/1000+60000}, 0x10)
mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x300000c, 0x4000010, 0xffffffffffffffff, 0x80000000)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5452, &(0x7f0000004e80)={'team0\x00'})

05:54:18 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8901, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)={'team0\x00'})
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@private1}}, &(0x7f0000000000)=0xe8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000280)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}], &(0x7f0000000040)='GPL\x00', 0x6, 0x60, &(0x7f0000000080)=""/96, 0x40f00, 0x0, [], r2, 0x1b, r1, 0x8, &(0x7f0000000100)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0x6, 0x6, 0x4}, 0x10}, 0x78)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x3)

05:54:18 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000180))

05:54:18 executing program 4:
openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vim2m\x00', 0x2, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x412000, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x10000, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x4, 0x28, &(0x7f0000000180)=""/40, 0x40f00, 0x8, [], 0x0, 0x1c, r1, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a, r2}, 0x78)

05:54:18 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000001c0)=@raw=[@jmp], 0x0, 0x20, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x22bc2}, 0x78)

05:54:18 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100000}, @rc={0x1f, @fixed={[], 0x12}, 0x4}, @qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d4, 0x1, 0x2})
r1 = socket(0x6, 0x80000, 0x8000)
clock_gettime(0x0, &(0x7f0000000580)={<r2=>0x0, <r3=>0x0})
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000005c0)={r2, r3/1000+60000}, 0x10)
mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x300000c, 0x4000010, 0xffffffffffffffff, 0x80000000)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)

05:54:18 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=<r2=>0x0, @ANYBLOB="0000000000000000ff030000000000000004000000000000b00000000000000006000000000000000300000000000000010000801f000000010400001e0200009602000000000045301a0009000000000000000700000000000000ffff00000000000018000033af7740c1b5cb8300"/131])
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000100)={{r2, 0x7, 0x3, 0x1ff, 0xffffffffffffffc1, 0x4, 0xfffffffffffffffe, 0x7, 0x1, 0x7, 0x1, 0x1, 0x19f, 0x3a6, 0x100000000}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)
r3 = socket(0x10, 0x3, 0x605)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x1, 0x2}, 0x6)
getitimer(0x0, &(0x7f00000001c0))
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001340)='/dev/bsg\x00', 0x400000, 0x0)
setsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000001380), 0x4)

05:54:18 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000180))

05:54:18 executing program 0:
r0 = socket$inet6(0xa, 0x0, 0x9)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x736a, 0x4)

05:54:18 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000001c0)=@raw=[@jmp], 0x0, 0x20, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x22bc2}, 0x78)

05:54:18 executing program 4:
openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vim2m\x00', 0x2, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x412000, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x4, 0x28, &(0x7f0000000180)=""/40, 0x40f00, 0x8, [], 0x0, 0x1c, r1, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a}, 0x78)

05:54:18 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=<r2=>0x0, @ANYBLOB="0000000000000000ff030000000000000004000000000000b00000000000000006000000000000000300000000000000010000801f000000010400001e0200009602000000000045301a0009000000000000000700000000000000ffff00000000000018000033af7740c1b5cb8300"/131])
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000100)={{r2, 0x7, 0x3, 0x1ff, 0xffffffffffffffc1, 0x4, 0xfffffffffffffffe, 0x7, 0x1, 0x7, 0x1, 0x1, 0x19f, 0x3a6, 0x100000000}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)
r3 = socket(0x10, 0x3, 0x605)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x1, 0x2}, 0x6)
getitimer(0x0, &(0x7f00000001c0))
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001340)='/dev/bsg\x00', 0x400000, 0x0)
setsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000001380), 0x4)

05:54:18 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100000}, @rc={0x1f, @fixed={[], 0x12}, 0x4}, @qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d4, 0x1, 0x2})
r1 = socket(0x6, 0x80000, 0x8000)
clock_gettime(0x0, &(0x7f0000000580)={<r2=>0x0, <r3=>0x0})
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000005c0)={r2, r3/1000+60000}, 0x10)
mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x300000c, 0x4000010, 0xffffffffffffffff, 0x80000000)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:18 executing program 3:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x2583, 0x2)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8904, 0x0)
personality(0x0)

05:54:18 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000001c0)=@raw=[@jmp], 0x0, 0x20, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x22bc2}, 0x78)

05:54:18 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x736a, 0x4)

05:54:18 executing program 4:
openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vim2m\x00', 0x2, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x412000, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x4, 0x28, &(0x7f0000000180)=""/40, 0x40f00, 0x8, [], 0x0, 0x1c, r1, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a}, 0x78)

[ 2596.510673][ T9487] Bluetooth: hci3: command 0x0401 tx timeout
05:54:19 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100000}, @rc={0x1f, @fixed={[], 0x12}, 0x4}, @qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d4, 0x1, 0x2})
r1 = socket(0x6, 0x80000, 0x8000)
clock_gettime(0x0, &(0x7f0000000580)={<r2=>0x0, <r3=>0x0})
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000005c0)={r2, r3/1000+60000}, 0x10)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:19 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=<r2=>0x0, @ANYBLOB="0000000000000000ff030000000000000004000000000000b00000000000000006000000000000000300000000000000010000801f000000010400001e0200009602000000000045301a0009000000000000000700000000000000ffff00000000000018000033af7740c1b5cb8300"/131])
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000100)={{r2, 0x7, 0x3, 0x1ff, 0xffffffffffffffc1, 0x4, 0xfffffffffffffffe, 0x7, 0x1, 0x7, 0x1, 0x1, 0x19f, 0x3a6, 0x100000000}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)
r3 = socket(0x10, 0x3, 0x605)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x1, 0x2}, 0x6)
getitimer(0x0, &(0x7f00000001c0))
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001340)='/dev/bsg\x00', 0x400000, 0x0)
setsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000001380), 0x4)

05:54:19 executing program 3:
r0 = socket$inet6(0xa, 0x4, 0x7ff6)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0004dbdf250e00000005002f000000000005002e000000000005002e000100000008000b0002000c0008002c0051900337e98c87522f14b0d5000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc040}, 0x404c001)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x50, 0xffffffffffffffff, 0x83000000)
syz_open_dev$ndb(&(0x7f0000000240)='/dev/nbd#\x00', 0x0, 0x4b00)

05:54:19 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000001c0)=@raw=[@jmp], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x22bc2}, 0xfdb8)

05:54:19 executing program 4:
openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vim2m\x00', 0x2, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x412000, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x4, 0x28, &(0x7f0000000180)=""/40, 0x40f00, 0x8, [], 0x0, 0x1c, r1, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a}, 0x78)

05:54:19 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x736a, 0x4)

05:54:19 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=<r2=>0x0, @ANYBLOB="0000000000000000ff030000000000000004000000000000b00000000000000006000000000000000300000000000000010000801f000000010400001e0200009602000000000045301a0009000000000000000700000000000000ffff00000000000018000033af7740c1b5cb8300"/131])
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000100)={{r2, 0x7, 0x3, 0x1ff, 0xffffffffffffffc1, 0x4, 0xfffffffffffffffe, 0x7, 0x1, 0x7, 0x1, 0x1, 0x19f, 0x3a6, 0x100000000}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)
r3 = socket(0x10, 0x3, 0x605)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x1, 0x2}, 0x6)
getitimer(0x0, &(0x7f00000001c0))
openat$bsg(0xffffffffffffff9c, &(0x7f0000001340)='/dev/bsg\x00', 0x400000, 0x0)

05:54:19 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100000}, @rc={0x1f, @fixed={[], 0x12}, 0x4}, @qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d4, 0x1, 0x2})
socket(0x6, 0x80000, 0x8000)
clock_gettime(0x0, &(0x7f0000000580))
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:19 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000001c0)=@raw=[@jmp], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x22bc2}, 0xfdb8)

05:54:19 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040), 0x10)
r1 = socket$inet(0x2, 0x805, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00'})

05:54:19 executing program 4:
openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vim2m\x00', 0x2, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x10000, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x4, 0x28, &(0x7f0000000180)=""/40, 0x40f00, 0x8, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a, r1}, 0x78)

05:54:19 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000001c0)=@raw=[@jmp], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x22bc2}, 0xfdb8)

05:54:19 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100000}, @rc={0x1f, @fixed={[], 0x12}, 0x4}, @qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d4, 0x1, 0x2})
socket(0x6, 0x80000, 0x8000)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:19 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x736a, 0x4)

05:54:19 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=<r2=>0x0, @ANYBLOB="0000000000000000ff030000000000000004000000000000b00000000000000006000000000000000300000000000000010000801f000000010400001e0200009602000000000045301a0009000000000000000700000000000000ffff00000000000018000033af7740c1b5cb8300"/131])
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000100)={{r2, 0x7, 0x3, 0x1ff, 0xffffffffffffffc1, 0x4, 0xfffffffffffffffe, 0x7, 0x1, 0x7, 0x1, 0x1, 0x19f, 0x3a6, 0x100000000}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)
r3 = socket(0x10, 0x3, 0x605)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x1, 0x2}, 0x6)
getitimer(0x0, &(0x7f00000001c0))

05:54:19 executing program 4:
openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vim2m\x00', 0x2, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x10000, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x4, 0x28, &(0x7f0000000180)=""/40, 0x40f00, 0x8, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a, r1}, 0x78)

05:54:19 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5452, &(0x7f0000004e80)={'team0\x00'})
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x42100, 0x0)
shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x3f, 0x8)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f0000000080)=0x10)

05:54:19 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000001c0)=@raw=[@jmp], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x22bc2}, 0x78)

05:54:19 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100000}, @rc={0x1f, @fixed={[], 0x12}, 0x4}, @qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d4, 0x1, 0x2})
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:19 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=<r2=>0x0, @ANYBLOB="0000000000000000ff030000000000000004000000000000b00000000000000006000000000000000300000000000000010000801f000000010400001e0200009602000000000045301a0009000000000000000700000000000000ffff00000000000018000033af7740c1b5cb8300"/131])
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000100)={{r2, 0x7, 0x3, 0x1ff, 0xffffffffffffffc1, 0x4, 0xfffffffffffffffe, 0x7, 0x1, 0x7, 0x1, 0x1, 0x19f, 0x3a6, 0x100000000}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)
r3 = socket(0x10, 0x3, 0x605)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x1, 0x2}, 0x6)

05:54:19 executing program 4:
openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vim2m\x00', 0x2, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x48440, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x10000, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x4, 0x28, &(0x7f0000000180)=""/40, 0x40f00, 0x8, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a, r0}, 0x78)

05:54:19 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100000}, @rc={0x1f, @fixed={[], 0x12}, 0x4}, @qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d4, 0x1, 0x2})
socket(0x6, 0x80000, 0x8000)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:20 executing program 0:
socket$inet6(0xa, 0x3, 0x9)
setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x736a, 0x4)

05:54:20 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000001c0)=@raw=[@jmp], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x22bc2}, 0x78)

05:54:20 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=<r2=>0x0, @ANYBLOB="0000000000000000ff030000000000000004000000000000b00000000000000006000000000000000300000000000000010000801f000000010400001e0200009602000000000045301a0009000000000000000700000000000000ffff00000000000018000033af7740c1b5cb8300"/131])
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000100)={{r2, 0x7, 0x3, 0x1ff, 0xffffffffffffffc1, 0x4, 0xfffffffffffffffe, 0x7, 0x1, 0x7, 0x1, 0x1, 0x19f, 0x3a6, 0x100000000}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)
socket(0x10, 0x3, 0x605)

05:54:20 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:20 executing program 4:
openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vim2m\x00', 0x2, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x10000, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x4, 0x28, &(0x7f0000000180)=""/40, 0x40f00, 0x8, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a, r0}, 0x78)

05:54:20 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000001c0)=@raw=[@jmp], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x22bc2}, 0x78)

05:54:20 executing program 0:
socket$inet6(0xa, 0x3, 0x9)
setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x736a, 0x4)

05:54:20 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100000}, @rc={0x1f, @fixed={[], 0x12}, 0x4}, @qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d4, 0x1, 0x2})
socket(0x6, 0x80000, 0x8000)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:20 executing program 1:
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:20 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=<r1=>0x0, @ANYBLOB="0000000000000000ff030000000000000004000000000000b00000000000000006000000000000000300000000000000010000801f000000010400001e0200009602000000000045301a0009000000000000000700000000000000ffff00000000000018000033af7740c1b5cb8300"/131])
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000100)={{r1, 0x7, 0x3, 0x1ff, 0xffffffffffffffc1, 0x4, 0xfffffffffffffffe, 0x7, 0x1, 0x7, 0x1, 0x1, 0x19f, 0x3a6, 0x100000000}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
socket(0x10, 0x3, 0x605)

05:54:20 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x10000, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x4, 0x28, &(0x7f0000000180)=""/40, 0x40f00, 0x8, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a, r0}, 0x78)

05:54:20 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000001c0)=@raw=[@jmp], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x22bc2}, 0xfdb8)

05:54:20 executing program 0:
socket$inet6(0xa, 0x3, 0x9)
setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x736a, 0x4)

05:54:20 executing program 1:
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:20 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x10000, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x4, 0x28, &(0x7f0000000180)=""/40, 0x40f00, 0x8, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a, r0}, 0x78)

05:54:20 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="0000000000000000ff030000000000000004000000000000b00000000000000006000000000000000300000000000000010000801f000000010400001e0200009602000000000045301a0009000000000000000700000000000000ffff00000000000018000033af7740c1b5cb8300"/131])
socket(0x10, 0x3, 0x605)

05:54:20 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100000}, @rc={0x1f, @fixed={[], 0x12}, 0x4}, @qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d4, 0x1, 0x2})
socket(0x6, 0x80000, 0x8000)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:20 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000001c0)=@raw=[@jmp], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240), 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x22bc2}, 0xfdb8)

05:54:20 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0)

05:54:20 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x10000, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x4, 0x28, &(0x7f0000000180)=""/40, 0x40f00, 0x8, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a, r0}, 0x78)

05:54:20 executing program 1:
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:20 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
socket(0x10, 0x3, 0x605)

05:54:20 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100000}, @rc={0x1f, @fixed={[], 0x12}, 0x4}, @qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d4, 0x1, 0x2})
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:20 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000001c0)=@raw=[@jmp], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240), 0x8, 0x10, 0x0, 0x0, 0x22bc2}, 0x78)

05:54:20 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @generic={0x2a, "b346565fb7923492d9001a9f4e81"}, @nfc={0x27, 0x1, 0x0, 0x4}, @generic={0x6, "b3dd6d0b4eb7867157e53fb43475"}, 0x1, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='geneve0\x00', 0x84b, 0x8, 0x2})

05:54:21 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x10000, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x4, 0x28, &(0x7f0000000180)=""/40, 0x40f00, 0x8, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a, r0}, 0x78)

05:54:21 executing program 1:
r0 = socket$inet6(0xa, 0x0, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:21 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket(0x10, 0x3, 0x605)

05:54:21 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:21 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000001c0)=@raw=[@jmp], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240), 0x8, 0x10, 0x0, 0x0, 0x22bc2}, 0x78)

[ 2598.592655][T31771] Bluetooth: hci3: command 0x0401 tx timeout
05:54:21 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x4, 0x28, &(0x7f0000000180)=""/40, 0x40f00, 0x8, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a, r0}, 0x78)

05:54:21 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1)
socket(0x10, 0x3, 0x605)

05:54:21 executing program 0:
clock_getres(0x3, &(0x7f0000000100))
r0 = socket$inet6(0xa, 0x3, 0x9)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
clock_gettime(0x0, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)={0xfff, 0x1, 0x4, 0x10000, 0x1ff, {r2, r3/1000+10000}, {0x3, 0x8, 0x5, 0x9e, 0x9c, 0x3, "8465e439"}, 0x0, 0x2, @planes=&(0x7f0000000040)={0xffff, 0x8, @mem_offset=0x1}, 0x800})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5452, &(0x7f0000004e80)={'team0\x00'})
r4 = getpgrp(0xffffffffffffffff)
wait4(r4, 0x0, 0x0, 0x0)
move_pages(r4, 0x6, &(0x7f00000001c0)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000200)=[0x4], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x7)

05:54:21 executing program 3:
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:21 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000001c0)=@raw=[@jmp], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240), 0x8, 0x10, 0x0, 0x0, 0x22bc2}, 0x78)

05:54:21 executing program 4:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)

05:54:21 executing program 1:
r0 = socket$inet6(0xa, 0x0, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:21 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
socket(0x10, 0x3, 0x605)

05:54:21 executing program 0:
clock_getres(0x3, &(0x7f0000000100))
r0 = socket$inet6(0xa, 0x3, 0x9)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
clock_gettime(0x0, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)={0xfff, 0x1, 0x4, 0x10000, 0x1ff, {r2, r3/1000+10000}, {0x3, 0x8, 0x5, 0x9e, 0x9c, 0x3, "8465e439"}, 0x0, 0x2, @planes=&(0x7f0000000040)={0xffff, 0x8, @mem_offset=0x1}, 0x800})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5452, &(0x7f0000004e80)={'team0\x00'})
r4 = getpgrp(0xffffffffffffffff)
wait4(r4, 0x0, 0x0, 0x0)
move_pages(r4, 0x6, &(0x7f00000001c0)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000200)=[0x4], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x7)

05:54:21 executing program 3:
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:21 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000001c0)=@raw=[@jmp], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240), 0x8, 0x10, &(0x7f0000000280)={0x0, 0x0, 0x5, 0x7}, 0x10, 0x22bc2}, 0xfdb8)

05:54:21 executing program 4:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)

05:54:21 executing program 5:
socket(0x10, 0x3, 0x605)

05:54:21 executing program 0:
clock_getres(0x3, &(0x7f0000000100))
r0 = socket$inet6(0xa, 0x3, 0x9)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
clock_gettime(0x0, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)={0xfff, 0x1, 0x4, 0x10000, 0x1ff, {r2, r3/1000+10000}, {0x3, 0x8, 0x5, 0x9e, 0x9c, 0x3, "8465e439"}, 0x0, 0x2, @planes=&(0x7f0000000040)={0xffff, 0x8, @mem_offset=0x1}, 0x800})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5452, &(0x7f0000004e80)={'team0\x00'})
r4 = getpgrp(0xffffffffffffffff)
wait4(r4, 0x0, 0x0, 0x0)
move_pages(r4, 0x6, &(0x7f00000001c0)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000200)=[0x4], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x7)

05:54:21 executing program 1:
r0 = socket$inet6(0xa, 0x0, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:21 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000001c0)=@raw=[@jmp], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240), 0x8, 0x10, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7}, 0x10, 0x22bc2}, 0xfdb8)

05:54:21 executing program 3:
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:21 executing program 5:
socket(0x0, 0x3, 0x605)

05:54:21 executing program 4:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)

05:54:22 executing program 0:
clock_getres(0x3, &(0x7f0000000100))
r0 = socket$inet6(0xa, 0x3, 0x9)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
clock_gettime(0x0, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)={0xfff, 0x1, 0x4, 0x10000, 0x1ff, {r2, r3/1000+10000}, {0x3, 0x8, 0x5, 0x9e, 0x9c, 0x3, "8465e439"}, 0x0, 0x2, @planes=&(0x7f0000000040)={0xffff, 0x8, @mem_offset=0x1}, 0x800})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5452, &(0x7f0000004e80)={'team0\x00'})
r4 = getpgrp(0xffffffffffffffff)
wait4(r4, 0x0, 0x0, 0x0)

05:54:22 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:22 executing program 3:
r0 = socket$inet6(0xa, 0x0, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:22 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000001c0)=@raw=[@jmp], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240), 0x8, 0x10, &(0x7f0000000280), 0x10, 0x22bc2}, 0xfdb8)

05:54:22 executing program 5:
socket(0x0, 0x3, 0x605)

05:54:22 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x4, 0x28, &(0x7f0000000180)=""/40, 0x40f00, 0x8, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a, r0}, 0x78)

05:54:22 executing program 0:
clock_getres(0x3, &(0x7f0000000100))
r0 = socket$inet6(0xa, 0x3, 0x9)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
clock_gettime(0x0, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)={0xfff, 0x1, 0x4, 0x10000, 0x1ff, {r2, r3/1000+10000}, {0x3, 0x8, 0x5, 0x9e, 0x9c, 0x3, "8465e439"}, 0x0, 0x2, @planes=&(0x7f0000000040)={0xffff, 0x8, @mem_offset=0x1}, 0x800})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5452, &(0x7f0000004e80)={'team0\x00'})
getpgrp(0xffffffffffffffff)

05:54:22 executing program 5:
socket(0x0, 0x3, 0x605)

05:54:22 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000001c0)=@raw=[@jmp], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240), 0x8, 0x10, &(0x7f0000000280), 0x10}, 0xfdb8)

05:54:22 executing program 3:
r0 = socket$inet6(0xa, 0x0, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:22 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:22 executing program 0:
clock_getres(0x3, &(0x7f0000000100))
r0 = socket$inet6(0xa, 0x3, 0x9)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
clock_gettime(0x0, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)={0xfff, 0x1, 0x4, 0x10000, 0x1ff, {r2, r3/1000+10000}, {0x3, 0x8, 0x5, 0x9e, 0x9c, 0x3, "8465e439"}, 0x0, 0x2, @planes=&(0x7f0000000040)={0xffff, 0x8, @mem_offset=0x1}, 0x800})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5452, &(0x7f0000004e80)={'team0\x00'})

05:54:22 executing program 2:
clock_gettime(0x0, &(0x7f0000000100)={<r0=>0x0, <r1=>0x0})
setitimer(0x1, &(0x7f0000000140)={{r0, r1/1000+60000}, {0x0, 0xea60}}, &(0x7f0000000180))
sysfs$2(0x2, 0x40, &(0x7f0000000000)=""/209)
r2 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x5452, &(0x7f0000004e80)={'team0\x00'})
clock_gettime(0xd4e8863c12c8ef23, &(0x7f00000001c0))

05:54:22 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x4, 0x28, &(0x7f0000000180)=""/40, 0x40f00, 0x8, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a, r0}, 0x78)

05:54:22 executing program 5:
socket(0x10, 0x0, 0x605)

05:54:22 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:22 executing program 2:
clock_gettime(0x0, &(0x7f0000000100)={<r0=>0x0, <r1=>0x0})
setitimer(0x1, &(0x7f0000000140)={{r0, r1/1000+60000}, {0x0, 0xea60}}, &(0x7f0000000180))
sysfs$2(0x2, 0x40, &(0x7f0000000000)=""/209)
r2 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x5452, &(0x7f0000004e80)={'team0\x00'})
clock_gettime(0xd4e8863c12c8ef23, &(0x7f00000001c0))

05:54:22 executing program 0:
clock_getres(0x3, &(0x7f0000000100))
socket$inet6(0xa, 0x3, 0x9)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
clock_gettime(0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)={0xfff, 0x1, 0x4, 0x10000, 0x1ff, {r1, r2/1000+10000}, {0x3, 0x8, 0x5, 0x9e, 0x9c, 0x3, "8465e439"}, 0x0, 0x2, @planes=&(0x7f0000000040)={0xffff, 0x8, @mem_offset=0x1}, 0x800})

05:54:22 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x4, 0x28, &(0x7f0000000180)=""/40, 0x40f00, 0x8, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a, r0}, 0x78)

05:54:22 executing program 3:
r0 = socket$inet6(0xa, 0x0, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:22 executing program 5:
socket(0x10, 0x0, 0x605)

05:54:23 executing program 0:
clock_getres(0x3, &(0x7f0000000100))
socket$inet6(0xa, 0x3, 0x9)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
clock_gettime(0x0, &(0x7f0000000000))
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10)

05:54:23 executing program 2:
clock_gettime(0x0, &(0x7f0000000100)={<r0=>0x0, <r1=>0x0})
setitimer(0x1, &(0x7f0000000140)={{r0, r1/1000+60000}, {0x0, 0xea60}}, &(0x7f0000000180))
sysfs$2(0x2, 0x40, &(0x7f0000000000)=""/209)
r2 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x5452, &(0x7f0000004e80)={'team0\x00'})
clock_gettime(0xd4e8863c12c8ef23, &(0x7f00000001c0))

05:54:23 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x0, &(0x7f0000000040), &(0x7f0000000140)='GPL\x00', 0x4, 0x28, &(0x7f0000000180)=""/40, 0x40f00, 0x8, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a, r0}, 0x78)

05:54:23 executing program 5:
socket(0x10, 0x0, 0x605)

05:54:23 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:23 executing program 1:
socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:23 executing program 2:
clock_gettime(0x0, &(0x7f0000000100)={<r0=>0x0, <r1=>0x0})
setitimer(0x1, &(0x7f0000000140)={{r0, r1/1000+60000}, {0x0, 0xea60}}, &(0x7f0000000180))
sysfs$2(0x2, 0x40, &(0x7f0000000000)=""/209)
socket$inet6(0xa, 0x3, 0x9)
clock_gettime(0xd4e8863c12c8ef23, &(0x7f00000001c0))

[ 2600.680458][T31771] Bluetooth: hci3: command 0x0401 tx timeout
05:54:23 executing program 0:
clock_getres(0x3, &(0x7f0000000100))
socket$inet6(0xa, 0x3, 0x9)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
clock_gettime(0x0, &(0x7f0000000000))

05:54:23 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x0, &(0x7f0000000040), &(0x7f0000000140)='GPL\x00', 0x4, 0x28, &(0x7f0000000180)=""/40, 0x40f00, 0x8, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a, r0}, 0x78)

05:54:23 executing program 5:
socket(0x10, 0x3, 0x0)

05:54:23 executing program 1:
socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:23 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:23 executing program 2:
clock_gettime(0x0, &(0x7f0000000100)={<r0=>0x0, <r1=>0x0})
setitimer(0x1, &(0x7f0000000140)={{r0, r1/1000+60000}, {0x0, 0xea60}}, &(0x7f0000000180))
sysfs$2(0x2, 0x40, &(0x7f0000000000)=""/209)
clock_gettime(0xd4e8863c12c8ef23, &(0x7f00000001c0))

05:54:23 executing program 0:
clock_getres(0x3, &(0x7f0000000100))
socket$inet6(0xa, 0x3, 0x9)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))

05:54:23 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x0, &(0x7f0000000040), &(0x7f0000000140)='GPL\x00', 0x4, 0x28, &(0x7f0000000180)=""/40, 0x40f00, 0x8, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a, r0}, 0x78)

05:54:23 executing program 5:
socket(0x10, 0x3, 0x0)

05:54:23 executing program 1:
socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:23 executing program 5:
socket(0x10, 0x3, 0x0)

05:54:23 executing program 2:
clock_gettime(0x0, &(0x7f0000000100)={<r0=>0x0, <r1=>0x0})
setitimer(0x1, &(0x7f0000000140)={{r0, r1/1000+60000}, {0x0, 0xea60}}, &(0x7f0000000180))
clock_gettime(0xd4e8863c12c8ef23, &(0x7f00000001c0))

05:54:23 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], 0x0, 0x4, 0x28, &(0x7f0000000180)=""/40, 0x40f00, 0x8, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a, r0}, 0x78)

05:54:23 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:23 executing program 0:
clock_getres(0x3, &(0x7f0000000100))
socket$inet6(0xa, 0x3, 0x9)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)

05:54:23 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, 0x0, 0x2, 0x0)

05:54:23 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x5)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5452, &(0x7f0000004e80)={'team0\x00'})

05:54:23 executing program 0:
clock_getres(0x3, &(0x7f0000000100))
socket$inet6(0xa, 0x3, 0x9)

05:54:24 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], 0x0, 0x4, 0x28, &(0x7f0000000180)=""/40, 0x40f00, 0x8, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a, r0}, 0x78)

05:54:24 executing program 2:
clock_gettime(0x0, &(0x7f0000000100))
clock_gettime(0xd4e8863c12c8ef23, &(0x7f00000001c0))

05:54:24 executing program 0:
clock_getres(0x3, &(0x7f0000000100))

05:54:24 executing program 3:
socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:24 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, 0x0, 0x2, 0x0)

05:54:24 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, &(0x7f00000001c0))

05:54:24 executing program 5:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
epoll_create1(0x0)
bind$vsock_stream(r0, &(0x7f00000006c0)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
socket$inet6(0xa, 0x12, 0x0)
gettid()

05:54:24 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], 0x0, 0x4, 0x28, &(0x7f0000000180)=""/40, 0x40f00, 0x8, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a, r0}, 0x78)

05:54:24 executing program 0:
clock_getres(0x0, &(0x7f0000000100))

05:54:24 executing program 3:
socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:24 executing program 2:
clock_gettime(0x0, &(0x7f00000001c0))

05:54:24 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, 0x0, 0x2, 0x0)

05:54:24 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5452, &(0x7f0000004e80)={'team0\x00'})
clock_gettime(0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x1, 0x8, 0x4, 0x4000, r4})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00'})
clock_settime(0x6, &(0x7f0000000040)={r1, r2+10000000})

05:54:24 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x28, &(0x7f0000000180)=""/40, 0x40f00, 0x8, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a, r0}, 0x78)

05:54:24 executing program 0:
clock_getres(0x0, &(0x7f0000000100))

05:54:24 executing program 3:
socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:24 executing program 2:
clock_gettime(0x0, &(0x7f00000001c0))

05:54:24 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="f1d0313caf9076671a138438842e32bfe0860680a5f2e825aca6b491f66b29c434fa6089a496839165f6200ba7152d3f5cd2c90482dc65b860958b2898bd6f00659bce5b3794c6c4adae2d43d3ff7036cc27370b5871a7d3fb2ef8f280cf1d143fd31465a881a5836f90", 0x6a, 0xfc}], 0x2040, &(0x7f00000001c0)=ANY=[@ANYBLOB="7465616d30002c2a2d2d5b5d3a2f99d7e087e1847306400900c0a72b913c5b1a3babad00006d30002c2328292a285d212c0123265d2f2c2c7365636c6162347d2c70657265697445"])
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5452, &(0x7f0000004e80)={'team0\x00'})

05:54:24 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a, r0}, 0x78)

05:54:24 executing program 0:
clock_getres(0x0, &(0x7f0000000100))

05:54:24 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x68840, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = getpgrp(0xffffffffffffffff)
wait4(r2, 0x0, 0x0, 0x0)
syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x80041)
ioprio_set$pid(0x3, r2, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
clock_gettime(0x0, &(0x7f0000000040)={<r4=>0x0, <r5=>0x0})
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f0000000180)={r4, r5/1000+10000}, 0x10)
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r6, 0x80685600, &(0x7f0000000080))
bind$vsock_stream(r6, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x5452, &(0x7f0000000000)={'team0\x00'})
ioctl$CAPI_INSTALLED(0xffffffffffffffff, 0x80024322)

05:54:24 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, 0x0, 0x2, 0x0)

05:54:24 executing program 2:
clock_gettime(0x0, &(0x7f00000001c0))

05:54:24 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x68840, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = getpgrp(0xffffffffffffffff)
wait4(r2, 0x0, 0x0, 0x0)
syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x80041)
ioprio_set$pid(0x3, r2, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
clock_gettime(0x0, &(0x7f0000000040)={<r4=>0x0, <r5=>0x0})
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f0000000180)={r4, r5/1000+10000}, 0x10)
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r6, 0x80685600, &(0x7f0000000080))
bind$vsock_stream(r6, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x5452, &(0x7f0000000000)={'team0\x00'})
ioctl$CAPI_INSTALLED(0xffffffffffffffff, 0x80024322)

05:54:24 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a, r0}, 0x78)

05:54:25 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="f1d0313caf9076671a138438842e32bfe0860680a5f2e825aca6b491f66b29c434fa6089a496839165f6200ba7152d3f5cd2c90482dc65b860958b2898bd6f00659bce5b3794c6c4adae2d43d3ff7036cc27370b5871a7d3fb2ef8f280cf1d143fd31465a881a5836f90", 0x6a, 0xfc}], 0x2040, &(0x7f00000001c0)=ANY=[@ANYBLOB="7465616d30002c2a2d2d5b5d3a2f99d7e087e1847306400900c0a72b913c5b1a3babad00006d30002c2328292a285d212c0123265d2f2c2c7365636c6162347d2c70657265697445"])
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5452, &(0x7f0000004e80)={'team0\x00'})

05:54:25 executing program 0:
clock_getres(0x3, 0x0)

05:54:25 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, 0x0, 0x2, 0x0)

05:54:25 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)

05:54:25 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5452, &(0x7f0000004e80)={'team0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r4=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@empty}, 0x0, @in=@private}}, &(0x7f0000000240)=0xe8)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @loopback}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@private0, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@private1}, 0x0, @in6=@initdev}}, &(0x7f00000004c0)=0xe8)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002400)={'syztnl1\x00', &(0x7f0000002340)={'syztnl2\x00', <r8=>r1, 0x1, 0x20, 0xfff, 0x0, {{0x25, 0x4, 0x0, 0x4, 0x94, 0x67, 0x0, 0xff, 0x2f, 0x0, @local, @multicast1, {[@lsrr={0x83, 0x23, 0x40, [@multicast2, @private=0xa010101, @private=0xa010100, @rand_addr=0x64010102, @local, @broadcast, @loopback, @private=0xa010101]}, @noop, @end, @end, @cipso={0x86, 0x58, 0x3, [{0x0, 0x8, "5aed4930a8b8"}, {0x5, 0xa, "62d77c8cd2763445"}, {0x7, 0xb, "4c9c82c450aa47a76c"}, {0x5, 0x7, "47a67b7a7c"}, {0x6, 0x9, "e29dab1802d71c"}, {0x6, 0x2}, {0x1, 0xc, "b44cbe1c59f005aa64df"}, {0x1, 0xd, "34fe4689d573f0bf516e8e"}, {0x7, 0xa, "818f8898f6852734"}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002440)={'team0\x00', <r9=>0x0})
sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000002c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002480)={0x748, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r1}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x89d9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r1}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xe73f}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x80}}}]}}, {{0x8, 0x1, r8}, {0x184, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x55d6}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x9f}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x95b0, 0xf9, 0xfb, 0x4aa}, {0x5, 0x80, 0x0, 0x3f}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r1}}}]}}]}, 0x748}, 0x1, 0x0, 0x0, 0x200c000}, 0x804)

05:54:25 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a, r0}, 0x78)

05:54:25 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5452, &(0x7f0000004e80)={'team0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r4=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@empty}, 0x0, @in=@private}}, &(0x7f0000000240)=0xe8)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @loopback}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@private0, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@private1}, 0x0, @in6=@initdev}}, &(0x7f00000004c0)=0xe8)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002400)={'syztnl1\x00', &(0x7f0000002340)={'syztnl2\x00', <r8=>r1, 0x1, 0x20, 0xfff, 0x0, {{0x25, 0x4, 0x0, 0x4, 0x94, 0x67, 0x0, 0xff, 0x2f, 0x0, @local, @multicast1, {[@lsrr={0x83, 0x23, 0x40, [@multicast2, @private=0xa010101, @private=0xa010100, @rand_addr=0x64010102, @local, @broadcast, @loopback, @private=0xa010101]}, @noop, @end, @end, @cipso={0x86, 0x58, 0x3, [{0x0, 0x8, "5aed4930a8b8"}, {0x5, 0xa, "62d77c8cd2763445"}, {0x7, 0xb, "4c9c82c450aa47a76c"}, {0x5, 0x7, "47a67b7a7c"}, {0x6, 0x9, "e29dab1802d71c"}, {0x6, 0x2}, {0x1, 0xc, "b44cbe1c59f005aa64df"}, {0x1, 0xd, "34fe4689d573f0bf516e8e"}, {0x7, 0xa, "818f8898f6852734"}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002440)={'team0\x00', <r9=>0x0})
sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000002c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002480)={0x748, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r1}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x89d9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r1}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xe73f}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x80}}}]}}, {{0x8, 0x1, r8}, {0x184, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x55d6}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x9f}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x95b0, 0xf9, 0xfb, 0x4aa}, {0x5, 0x80, 0x0, 0x3f}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r1}}}]}}]}, 0x748}, 0x1, 0x0, 0x0, 0x200c000}, 0x804)

05:54:25 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="f1d0313caf9076671a138438842e32bfe0860680a5f2e825aca6b491f66b29c434fa6089a496839165f6200ba7152d3f5cd2c90482dc65b860958b2898bd6f00659bce5b3794c6c4adae2d43d3ff7036cc27370b5871a7d3fb2ef8f280cf1d143fd31465a881a5836f90", 0x6a, 0xfc}], 0x2040, &(0x7f00000001c0)=ANY=[@ANYBLOB="7465616d30002c2a2d2d5b5d3a2f99d7e087e1847306400900c0a72b913c5b1a3babad00006d30002c2328292a285d212c0123265d2f2c2c7365636c6162347d2c70657265697445"])
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5452, &(0x7f0000004e80)={'team0\x00'})

05:54:25 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, 0x0, 0x2, 0x0)

[ 2602.750482][T16619] Bluetooth: hci3: command 0x0401 tx timeout
05:54:25 executing program 2:
socket$inet6(0xa, 0x12, 0x0)
syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x8000)
r0 = gettid()
gettid()
r1 = getpgrp(r0)
ioprio_set$pid(0x2, r1, 0x0)
getpgrp(r1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000003c0)={0x0, @pix={0x1e1d, 0x1, 0x12077608, 0x8, 0x7, 0x7ff, 0xc, 0x9, 0x1, 0x2, 0x1, 0x6}})
write$nbd(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xf6)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', <r3=>0x0, 0x700, 0x8, 0x20, 0x5, {{0x26, 0x4, 0x2, 0x18, 0x98, 0x68, 0x0, 0xb9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x5c, 0x98, 0x1, 0x0, [{@multicast2, 0x2}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x4}, {@multicast2}, {@empty, 0x1000}, {@multicast2, 0x40}, {@private=0xa010101, 0x9}, {@loopback, 0x1}]}, @rr={0x7, 0x27, 0xa0, [@broadcast, @private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast2, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})
ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @ethernet={0x1, @random="1eb5aa8c589b"}, @can={0x1d, r3}, @ethernet={0x6, @random="26f9dbeb1481"}, 0x4, 0x0, 0x0, 0x0, 0x8e, &(0x7f0000000000)='bond_slave_1\x00', 0x0, 0xf9, 0x3})

05:54:25 executing program 5:
socket$inet6(0xa, 0x12, 0x0)
syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x8000)
r0 = gettid()
gettid()
r1 = getpgrp(r0)
ioprio_set$pid(0x2, r1, 0x0)
getpgrp(r1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000003c0)={0x0, @pix={0x1e1d, 0x1, 0x12077608, 0x8, 0x7, 0x7ff, 0xc, 0x9, 0x1, 0x2, 0x1, 0x6}})
write$nbd(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xf6)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', <r3=>0x0, 0x700, 0x8, 0x20, 0x5, {{0x26, 0x4, 0x2, 0x18, 0x98, 0x68, 0x0, 0xb9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x5c, 0x98, 0x1, 0x0, [{@multicast2, 0x2}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x4}, {@multicast2}, {@empty, 0x1000}, {@multicast2, 0x40}, {@private=0xa010101, 0x9}, {@loopback, 0x1}]}, @rr={0x7, 0x27, 0xa0, [@broadcast, @private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast2, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})
ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @ethernet={0x1, @random="1eb5aa8c589b"}, @can={0x1d, r3}, @ethernet={0x6, @random="26f9dbeb1481"}, 0x4, 0x0, 0x0, 0x0, 0x8e, &(0x7f0000000000)='bond_slave_1\x00', 0x0, 0xf9, 0x3})

05:54:25 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a, r0}, 0x78)

05:54:25 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x9)
move_pages(0xffffffffffffffff, 0x5, &(0x7f0000000000)=[&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000040)=[0x7fffffff, 0x8, 0x8, 0xa7e], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5452, &(0x7f0000004e80)={'team0\x00'})

05:54:25 executing program 0 (fault-call:1 fault-nth:0):
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:25 executing program 1:
socket$inet6(0xa, 0x3, 0x9)
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="f1d0313caf9076671a138438842e32bfe0860680a5f2e825aca6b491f66b29c434fa6089a496839165f6200ba7152d3f5cd2c90482dc65b860958b2898bd6f00659bce5b3794c6c4adae2d43d3ff7036cc27370b5871a7d3fb2ef8f280cf1d143fd31465a881a5836f90", 0x6a, 0xfc}], 0x2040, &(0x7f00000001c0)=ANY=[@ANYBLOB="7465616d30002c2a2d2d5b5d3a2f99d7e087e1847306400900c0a72b913c5b1a3babad00006d30002c2328292a285d212c0123265d2f2c2c7365636c6162347d2c70657265697445"])

05:54:25 executing program 2 (fault-call:0 fault-nth:0):
clock_gettime(0xd4e8863c12c8ef23, 0x0)

05:54:25 executing program 5:
socket$inet6(0xa, 0x12, 0x0)
syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x8000)
r0 = gettid()
gettid()
r1 = getpgrp(r0)
ioprio_set$pid(0x2, r1, 0x0)
getpgrp(r1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000003c0)={0x0, @pix={0x1e1d, 0x1, 0x12077608, 0x8, 0x7, 0x7ff, 0xc, 0x9, 0x1, 0x2, 0x1, 0x6}})
write$nbd(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xf6)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', <r3=>0x0, 0x700, 0x8, 0x20, 0x5, {{0x26, 0x4, 0x2, 0x18, 0x98, 0x68, 0x0, 0xb9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x5c, 0x98, 0x1, 0x0, [{@multicast2, 0x2}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x4}, {@multicast2}, {@empty, 0x1000}, {@multicast2, 0x40}, {@private=0xa010101, 0x9}, {@loopback, 0x1}]}, @rr={0x7, 0x27, 0xa0, [@broadcast, @private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast2, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})
ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @ethernet={0x1, @random="1eb5aa8c589b"}, @can={0x1d, r3}, @ethernet={0x6, @random="26f9dbeb1481"}, 0x4, 0x0, 0x0, 0x0, 0x8e, &(0x7f0000000000)='bond_slave_1\x00', 0x0, 0xf9, 0x3})

05:54:25 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x9)
move_pages(0xffffffffffffffff, 0x5, &(0x7f0000000000)=[&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000040)=[0x7fffffff, 0x8, 0x8, 0xa7e], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5452, &(0x7f0000004e80)={'team0\x00'})

05:54:25 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x1, 0x7fffffff}, 0x10, 0x1c32a, r0}, 0x78)

[ 2603.163988][T26213] FAULT_INJECTION: forcing a failure.
[ 2603.163988][T26213] name failslab, interval 1, probability 0, space 0, times 0
[ 2603.202318][T26213] CPU: 0 PID: 26213 Comm: syz-executor.0 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2603.212027][T26213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2603.222104][T26213] Call Trace:
[ 2603.225399][T26213]  dump_stack+0x107/0x163
[ 2603.229765][T26213]  should_fail.cold+0x5/0x1f
[ 2603.234384][T26213]  ? getname_flags.part.0+0x50/0x4f0
[ 2603.239693][T26213]  ? getname_flags.part.0+0x50/0x4f0
[ 2603.244998][T26213]  should_failslab+0x5/0x10
[ 2603.249531][T26213]  kmem_cache_alloc+0x5e/0x380
[ 2603.254320][T26213]  getname_flags.part.0+0x50/0x4f0
[ 2603.259449][T26213]  getname+0x8e/0xd0
[ 2603.263340][T26213]  do_sys_openat2+0xf5/0x420
[ 2603.267925][T26213]  ? build_open_flags+0x680/0x680
[ 2603.272956][T26213]  ? __mutex_unlock_slowpath+0xe2/0x610
[ 2603.278533][T26213]  ? wait_for_completion_io+0x260/0x260
[ 2603.284083][T26213]  __x64_sys_openat+0x13f/0x1f0
[ 2603.288937][T26213]  ? __ia32_sys_open+0x1c0/0x1c0
[ 2603.293886][T26213]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2603.299782][T26213]  do_syscall_64+0x2d/0x70
[ 2603.304201][T26213]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2603.310101][T26213] RIP: 0033:0x45e149
[ 2603.314013][T26213] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2603.333706][T26213] RSP: 002b:00007f54ed431c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 2603.342113][T26213] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149
[ 2603.350103][T26213] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003
05:54:25 executing program 5:
socket$inet6(0xa, 0x12, 0x0)
syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x8000)
r0 = gettid()
gettid()
r1 = getpgrp(r0)
ioprio_set$pid(0x2, r1, 0x0)
getpgrp(r1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000003c0)={0x0, @pix={0x1e1d, 0x1, 0x12077608, 0x8, 0x7, 0x7ff, 0xc, 0x9, 0x1, 0x2, 0x1, 0x6}})
write$nbd(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xf6)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', <r3=>0x0, 0x700, 0x8, 0x20, 0x5, {{0x26, 0x4, 0x2, 0x18, 0x98, 0x68, 0x0, 0xb9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x5c, 0x98, 0x1, 0x0, [{@multicast2, 0x2}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x4}, {@multicast2}, {@empty, 0x1000}, {@multicast2, 0x40}, {@private=0xa010101, 0x9}, {@loopback, 0x1}]}, @rr={0x7, 0x27, 0xa0, [@broadcast, @private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast2, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})
ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @ethernet={0x1, @random="1eb5aa8c589b"}, @can={0x1d, r3}, @ethernet={0x6, @random="26f9dbeb1481"}, 0x4, 0x0, 0x0, 0x0, 0x8e, &(0x7f0000000000)='bond_slave_1\x00', 0x0, 0xf9, 0x3})

[ 2603.358070][T26213] RBP: 00007f54ed431ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2603.366032][T26213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2603.373994][T26213] R13: 00007fff428b7cef R14: 00007f54ed4329c0 R15: 000000000119bf8c
05:54:25 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1c32a, r0}, 0x78)

05:54:26 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="f1d0313caf9076671a138438842e32bfe0860680a5f2e825aca6b491f66b29c434fa6089a496839165f6200ba7152d3f5cd2c90482dc65b860958b2898bd6f00659bce5b3794c6c4adae2d43d3ff7036cc27370b5871a7d3fb2ef8f280cf1d143fd31465a881a5836f90", 0x6a, 0xfc}], 0x2040, &(0x7f00000001c0)=ANY=[@ANYBLOB="7465616d30002c2a2d2d5b5d3a2f99d7e087e1847306400900c0a72b913c5b1a3babad00006d30002c2328292a285d212c0123265d2f2c2c7365636c6162347d2c70657265697445"])

05:54:26 executing program 0 (fault-call:1 fault-nth:1):
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

[ 2603.496757][T26225] FAULT_INJECTION: forcing a failure.
[ 2603.496757][T26225] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2603.576354][T26225] CPU: 1 PID: 26225 Comm: syz-executor.2 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2603.586052][T26225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2603.596253][T26225] Call Trace:
[ 2603.600496][T26225]  dump_stack+0x107/0x163
[ 2603.606208][T26225]  should_fail.cold+0x5/0x1f
[ 2603.610845][T26225]  _copy_to_user+0x2c/0x150
[ 2603.615386][T26225]  simple_read_from_buffer+0xcc/0x160
[ 2603.620798][T26225]  proc_fail_nth_read+0x187/0x220
[ 2603.625870][T26225]  ? proc_fault_inject_read+0x220/0x220
[ 2603.632438][T26225]  ? security_file_permission+0x248/0x560
[ 2603.638190][T26225]  ? proc_fault_inject_read+0x220/0x220
[ 2603.643766][T26225]  vfs_read+0x1b5/0x570
[ 2603.648874][T26225]  ksys_read+0x12d/0x250
[ 2603.653148][T26225]  ? vfs_write+0xa80/0xa80
[ 2603.657593][T26225]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2603.665280][T26225]  do_syscall_64+0x2d/0x70
[ 2603.669730][T26225]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2603.678367][T26225] RIP: 0033:0x417a41
[ 2603.682581][T26225] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[ 2603.702940][T26225] RSP: 002b:00007fac68264c70 EFLAGS: 00000293 ORIG_RAX: 0000000000000000
[ 2603.711483][T26225] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 0000000000417a41
05:54:26 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78)

[ 2603.719892][T26225] RDX: 000000000000000f RSI: 00007fac68264cb0 RDI: 0000000000000003
[ 2603.728349][T26225] RBP: 00007fac68264ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2603.736531][T26225] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[ 2603.744555][T26225] R13: 00007ffd36414f2f R14: 00007fac682659c0 R15: 000000000119bf8c
05:54:26 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x9)
move_pages(0xffffffffffffffff, 0x5, &(0x7f0000000000)=[&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000040)=[0x7fffffff, 0x8, 0x8, 0xa7e], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5452, &(0x7f0000004e80)={'team0\x00'})

05:54:26 executing program 5:
socket$inet6(0xa, 0x12, 0x0)
syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x8000)
r0 = gettid()
gettid()
r1 = getpgrp(r0)
ioprio_set$pid(0x2, r1, 0x0)
getpgrp(r1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000003c0)={0x0, @pix={0x1e1d, 0x1, 0x12077608, 0x8, 0x7, 0x7ff, 0xc, 0x9, 0x1, 0x2, 0x1, 0x6}})
write$nbd(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xf6)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x20, 0x5, {{0x26, 0x4, 0x2, 0x18, 0x98, 0x68, 0x0, 0xb9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x5c, 0x98, 0x1, 0x0, [{@multicast2, 0x2}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x4}, {@multicast2}, {@empty, 0x1000}, {@multicast2, 0x40}, {@private=0xa010101, 0x9}, {@loopback, 0x1}]}, @rr={0x7, 0x27, 0xa0, [@broadcast, @private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast2, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})

[ 2603.832762][T26234] FAULT_INJECTION: forcing a failure.
[ 2603.832762][T26234] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2603.868639][T26234] CPU: 1 PID: 26234 Comm: syz-executor.0 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2603.878449][T26234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2603.888527][T26234] Call Trace:
[ 2603.891826][T26234]  dump_stack+0x107/0x163
[ 2603.896189][T26234]  should_fail.cold+0x5/0x1f
[ 2603.900816][T26234]  strncpy_from_user+0x34/0x3e0
[ 2603.905703][T26234]  getname_flags.part.0+0x95/0x4f0
[ 2603.910845][T26234]  getname+0x8e/0xd0
[ 2603.914762][T26234]  do_sys_openat2+0xf5/0x420
[ 2603.919382][T26234]  ? build_open_flags+0x680/0x680
[ 2603.924428][T26234]  ? __mutex_unlock_slowpath+0xe2/0x610
[ 2603.930906][T26234]  ? wait_for_completion_io+0x260/0x260
[ 2603.937054][T26234]  __x64_sys_openat+0x13f/0x1f0
[ 2603.943179][T26234]  ? __ia32_sys_open+0x1c0/0x1c0
[ 2603.949315][T26234]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2603.955635][T26234]  do_syscall_64+0x2d/0x70
[ 2603.961374][T26234]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2603.967852][T26234] RIP: 0033:0x45e149
[ 2603.972067][T26234] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2603.991874][T26234] RSP: 002b:00007f54ed431c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 2604.001227][T26234] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149
[ 2604.009858][T26234] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003
[ 2604.018451][T26234] RBP: 00007f54ed431ca0 R08: 0000000000000000 R09: 0000000000000000
05:54:26 executing program 4:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

[ 2604.027108][T26234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2604.035688][T26234] R13: 00007fff428b7cef R14: 00007f54ed4329c0 R15: 000000000119bf8c
05:54:26 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)

05:54:26 executing program 0 (fault-call:1 fault-nth:2):
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:26 executing program 4:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

05:54:26 executing program 1:
syz_mount_image$cramfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="f1d0313caf9076671a138438842e32bfe0860680a5f2e825aca6b491f66b29c434fa6089a496839165f6200ba7152d3f5cd2c90482dc65b860958b2898bd6f00659bce5b3794c6c4adae2d43d3ff7036cc27370b5871a7d3fb2ef8f280cf1d143fd31465a881a5836f90", 0x6a, 0xfc}], 0x2040, &(0x7f00000001c0)=ANY=[@ANYBLOB="7465616d30002c2a2d2d5b5d3a2f99d7e087e1847306400900c0a72b913c5b1a3babad00006d30002c2328292a285d212c0123265d2f2c2c7365636c6162347d2c70657265697445"])

05:54:26 executing program 5:
socket$inet6(0xa, 0x12, 0x0)
syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x8000)
r0 = gettid()
gettid()
r1 = getpgrp(r0)
ioprio_set$pid(0x2, r1, 0x0)
getpgrp(r1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000003c0)={0x0, @pix={0x1e1d, 0x1, 0x12077608, 0x8, 0x7, 0x7ff, 0xc, 0x9, 0x1, 0x2, 0x1, 0x6}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x20, 0x5, {{0x26, 0x4, 0x2, 0x18, 0x98, 0x68, 0x0, 0xb9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x5c, 0x98, 0x1, 0x0, [{@multicast2, 0x2}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x4}, {@multicast2}, {@empty, 0x1000}, {@multicast2, 0x40}, {@private=0xa010101, 0x9}, {@loopback, 0x1}]}, @rr={0x7, 0x27, 0xa0, [@broadcast, @private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast2, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})

[ 2604.279203][T26250] FAULT_INJECTION: forcing a failure.
[ 2604.279203][T26250] name failslab, interval 1, probability 0, space 0, times 0
05:54:26 executing program 3:
socket$inet6(0xa, 0x3, 0x9)
move_pages(0xffffffffffffffff, 0x5, &(0x7f0000000000)=[&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000040)=[0x7fffffff, 0x8, 0x8, 0xa7e], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0)

[ 2604.342096][T26250] CPU: 1 PID: 26250 Comm: syz-executor.0 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2604.351918][T26250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2604.361999][T26250] Call Trace:
[ 2604.365292][T26250]  dump_stack+0x107/0x163
[ 2604.369649][T26250]  should_fail.cold+0x5/0x1f
[ 2604.374263][T26250]  ? __alloc_file+0x21/0x280
[ 2604.378880][T26250]  ? __alloc_file+0x21/0x280
[ 2604.383488][T26250]  should_failslab+0x5/0x10
[ 2604.388013][T26250]  kmem_cache_alloc+0x5e/0x380
[ 2604.392799][T26250]  ? stack_trace_consume_entry+0x160/0x160
[ 2604.398649][T26250]  __alloc_file+0x21/0x280
[ 2604.403088][T26250]  alloc_empty_file+0x6d/0x170
[ 2604.407881][T26250]  path_openat+0x125/0x27a0
[ 2604.412412][T26250]  ? __lock_acquire+0x16c2/0x54b0
[ 2604.417482][T26250]  ? path_lookupat+0x830/0x830
[ 2604.422279][T26250]  ? lockdep_hardirqs_on_prepare+0x420/0x420
[ 2604.428297][T26250]  do_filp_open+0x17e/0x3c0
[ 2604.432821][T26250]  ? may_open_dev+0xf0/0xf0
[ 2604.437347][T26250]  ? alloc_fd+0x2da/0x650
[ 2604.441694][T26250]  ? lock_downgrade+0x6d0/0x6d0
[ 2604.446570][T26250]  ? do_raw_spin_lock+0x120/0x2b0
[ 2604.451623][T26250]  ? rwlock_bug.part.0+0x90/0x90
[ 2604.456590][T26250]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 2604.462885][T26250]  ? _raw_spin_unlock+0x24/0x40
[ 2604.467761][T26250]  ? alloc_fd+0x2da/0x650
[ 2604.472116][T26250]  do_sys_openat2+0x16d/0x420
[ 2604.476820][T26250]  ? build_open_flags+0x680/0x680
[ 2604.481862][T26250]  ? __mutex_unlock_slowpath+0xe2/0x610
[ 2604.487431][T26250]  ? wait_for_completion_io+0x260/0x260
[ 2604.493004][T26250]  __x64_sys_openat+0x13f/0x1f0
[ 2604.497884][T26250]  ? __ia32_sys_open+0x1c0/0x1c0
[ 2604.502850][T26250]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2604.508760][T26250]  do_syscall_64+0x2d/0x70
[ 2604.513192][T26250]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2604.519107][T26250] RIP: 0033:0x45e149
[ 2604.523009][T26250] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
05:54:27 executing program 2:
clock_gettime(0xd4e8863c0000000b, 0x0)

[ 2604.542637][T26250] RSP: 002b:00007f54ed431c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 2604.551067][T26250] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149
[ 2604.559050][T26250] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003
[ 2604.567031][T26250] RBP: 00007f54ed431ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2604.575016][T26250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2604.583003][T26250] R13: 00007fff428b7cef R14: 00007f54ed4329c0 R15: 000000000119bf8c
05:54:27 executing program 5:
socket$inet6(0xa, 0x12, 0x0)
syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x8000)
r0 = gettid()
gettid()
r1 = getpgrp(r0)
ioprio_set$pid(0x2, r1, 0x0)
getpgrp(r1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x20, 0x5, {{0x26, 0x4, 0x2, 0x18, 0x98, 0x68, 0x0, 0xb9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x5c, 0x98, 0x1, 0x0, [{@multicast2, 0x2}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x4}, {@multicast2}, {@empty, 0x1000}, {@multicast2, 0x40}, {@private=0xa010101, 0x9}, {@loopback, 0x1}]}, @rr={0x7, 0x27, 0xa0, [@broadcast, @private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast2, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})

05:54:27 executing program 4:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

05:54:27 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
clock_getres(0x3, &(0x7f00000001c0))
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00')
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x7c040, 0x0)
clock_getres(0x2, &(0x7f00000002c0))
getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000810}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00', @ANYRES16=r0, @ANYBLOB="00072bbd7000fcdbdf2502000000"], 0x14}}, 0x4000)
getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))

05:54:27 executing program 1:
syz_mount_image$cramfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="f1d0313caf9076671a138438842e32bfe0860680a5f2e825aca6b491f66b29c434fa6089a496839165f6200ba7152d3f5cd2c90482dc65b860958b2898bd6f00659bce5b3794c6c4adae2d43d3ff7036cc27370b5871a7d3fb2ef8f280cf1d143fd31465a881a5836f90", 0x6a, 0xfc}], 0x2040, &(0x7f00000001c0)=ANY=[@ANYBLOB="7465616d30002c2a2d2d5b5d3a2f99d7e087e1847306400900c0a72b913c5b1a3babad00006d30002c2328292a285d212c0123265d2f2c2c7365636c6162347d2c70657265697445"])

05:54:27 executing program 3:
move_pages(0xffffffffffffffff, 0x5, &(0x7f0000000000)=[&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000040)=[0x7fffffff, 0x8, 0x8, 0xa7e], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0)

05:54:27 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
syz_io_uring_setup(0x6844, &(0x7f0000000000)={0x0, 0x5fdc, 0x4, 0x2, 0x113}, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=<r0=>0x0)
r1 = syz_mount_image$cramfs(&(0x7f0000000100)='cramfs\x00', &(0x7f0000000140)='./file0\x00', 0x3, 0x6, &(0x7f0000002400)=[{&(0x7f0000000180)="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", 0x1000, 0x7}, {&(0x7f0000001180)="4ee6df06cb021f1cda", 0x9}, {&(0x7f00000011c0)="e5ab65d469ea060d17473564538ea21c8051bb4fdf5304dc14249f8ecc5ce53ed836ec4b0660b80e033039c2d2b62c0812b0174f27eea7721e95ff8b2278b936835d604fc305a2ba303f922c2ad5de8a216d9f1ae56322a8489736e9abfb5dc6b50642d83f7f70d8241cd2561e04890b735a72f320245a62bc0aa9276dca8589ba4bc003991fd85d716537e9973858fbdf609ac346415714cbb543aa2f7bddd695fbe6e057242a9b424171f05bb8dff0a0a44d5924e5229f958d9998eb8ccdf13dcf07143b65e5153efff8589b93ed2ceca97b76294c3307f6630c5781a9b3b73b37b4fd5b", 0xe5, 0x3}, {&(0x7f00000012c0)="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", 0x1000, 0x100000001}, {&(0x7f00000022c0)="a5f44b6d89de2bfc1abe30943eea1b95dbc017d6809f2ff2ee9780cee38e76f49c38ff59876da151c387af6fc1298fb0de98b205001c3ed20bc8967cbd87b3a1cda2318ee07a8efdf8afc0fca05e72f6bf380be7db78d7bfac0e48f6693e8bb5ac607f6bb7f288b71be8f5acfdc7cfca1dbf7533070c811c50a2034484b5f31c3dd8ed6478a9fab8fcf04bee13fa322064220aed752b33f9481faa29361c3eef28866f98ba18b1836667a8b6e8b63c4907002520b427ff5d9e6499100de306930c9eb2033762640771eeaf77fb2bc7f561d4f77758a17c2ae53e28707d6fdbd55ebc723f2b16cf6c987c0820cbb0bd15c3fc8bba540b351881385b46", 0xfc, 0x2}, {&(0x7f00000023c0)="5c6061726ba6ff8f5275251c98761ace7c05797625b5901f1c97647ac92ec37e56d3344eb152b9ac9ce1018836f91ac003c096fc79f4c4", 0x37, 0x6}], 0x30029, &(0x7f00000024c0)={[{'\\'}], [{@smackfsroot={'smackfsroot', 0x3d, '+['}}, {@appraise_type='appraise_type=imasig'}]})
syz_io_uring_submit(0x0, r0, &(0x7f0000002540)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r1, 0x0, &(0x7f0000002500)='./file0\x00', 0xc0, 0x80, 0x23456}, 0x2)

[ 2604.840257][ T9487] Bluetooth: hci3: command 0x0401 tx timeout
05:54:27 executing program 0 (fault-call:1 fault-nth:3):
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:27 executing program 5:
socket$inet6(0xa, 0x12, 0x0)
syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x8000)
r0 = gettid()
gettid()
r1 = getpgrp(r0)
ioprio_set$pid(0x2, r1, 0x0)
getpgrp(r1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x20, 0x5, {{0x26, 0x4, 0x2, 0x18, 0x98, 0x68, 0x0, 0xb9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x5c, 0x98, 0x1, 0x0, [{@multicast2, 0x2}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x4}, {@multicast2}, {@empty, 0x1000}, {@multicast2, 0x40}, {@private=0xa010101, 0x9}, {@loopback, 0x1}]}, @rr={0x7, 0x27, 0xa0, [@broadcast, @private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast2, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})

05:54:27 executing program 4:
syz_mount_image$cramfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="f1d0313caf9076671a138438842e32bfe0860680a5f2e825aca6b491f66b29c434fa6089a496839165f6200ba7152d3f5cd2c90482dc65b860958b2898bd6f00659bce5b3794c6c4adae2d43d3ff7036cc27370b5871a7d3fb2ef8f280cf1d143fd31465a881a5836f90", 0x6a, 0xfc}], 0x2040, &(0x7f00000001c0)=ANY=[@ANYBLOB="7465616d30002c2a2d2d5b5d3a2f99d7e087e1847306400900c0a72b913c5b1a3babad00006d30002c2328292a285d212c0123265d2f2c2c7365636c6162347d2c70657265697445"])

[ 2605.037808][T26288] FAULT_INJECTION: forcing a failure.
[ 2605.037808][T26288] name failslab, interval 1, probability 0, space 0, times 0
[ 2605.063806][T26288] CPU: 0 PID: 26288 Comm: syz-executor.0 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2605.073529][T26288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2605.083606][T26288] Call Trace:
[ 2605.086905][T26288]  dump_stack+0x107/0x163
[ 2605.091282][T26288]  should_fail.cold+0x5/0x1f
[ 2605.095903][T26288]  ? security_file_alloc+0x34/0x170
[ 2605.101131][T26288]  ? security_file_alloc+0x34/0x170
[ 2605.106355][T26288]  should_failslab+0x5/0x10
[ 2605.111569][T26288]  kmem_cache_alloc+0x5e/0x380
[ 2605.116368][T26288]  security_file_alloc+0x34/0x170
[ 2605.121411][T26288]  __alloc_file+0xd8/0x280
[ 2605.125865][T26288]  alloc_empty_file+0x6d/0x170
[ 2605.130661][T26288]  path_openat+0x125/0x27a0
[ 2605.135196][T26288]  ? __lock_acquire+0x16c2/0x54b0
[ 2605.140252][T26288]  ? path_lookupat+0x830/0x830
[ 2605.145040][T26288]  ? lockdep_hardirqs_on_prepare+0x420/0x420
[ 2605.151062][T26288]  do_filp_open+0x17e/0x3c0
[ 2605.155580][T26288]  ? may_open_dev+0xf0/0xf0
[ 2605.160110][T26288]  ? alloc_fd+0x2da/0x650
[ 2605.164459][T26288]  ? lock_downgrade+0x6d0/0x6d0
[ 2605.169330][T26288]  ? do_raw_spin_lock+0x120/0x2b0
[ 2605.174384][T26288]  ? rwlock_bug.part.0+0x90/0x90
[ 2605.180318][T26288]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
05:54:27 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
clock_getres(0x4, &(0x7f0000000000))

05:54:27 executing program 1:
syz_mount_image$cramfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="f1d0313caf9076671a138438842e32bfe0860680a5f2e825aca6b491f66b29c434fa6089a496839165f6200ba7152d3f5cd2c90482dc65b860958b2898bd6f00659bce5b3794c6c4adae2d43d3ff7036cc27370b5871a7d3fb2ef8f280cf1d143fd31465a881a5836f90", 0x6a, 0xfc}], 0x2040, &(0x7f00000001c0)=ANY=[@ANYBLOB="7465616d30002c2a2d2d5b5d3a2f99d7e087e1847306400900c0a72b913c5b1a3babad00006d30002c2328292a285d212c0123265d2f2c2c7365636c6162347d2c70657265697445"])

05:54:27 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=[0x7fffffff, 0x8, 0x8, 0xa7e], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0)

[ 2605.187108][T26288]  ? _raw_spin_unlock+0x24/0x40
[ 2605.191982][T26288]  ? alloc_fd+0x2da/0x650
[ 2605.196340][T26288]  do_sys_openat2+0x16d/0x420
[ 2605.202261][T26288]  ? build_open_flags+0x680/0x680
[ 2605.207822][T26288]  ? __mutex_unlock_slowpath+0xe2/0x610
[ 2605.213387][T26288]  ? wait_for_completion_io+0x260/0x260
[ 2605.219065][T26288]  __x64_sys_openat+0x13f/0x1f0
[ 2605.223953][T26288]  ? __ia32_sys_open+0x1c0/0x1c0
[ 2605.228912][T26288]  ? syscall_enter_from_user_mode+0x1d/0x50
05:54:27 executing program 5:
socket$inet6(0xa, 0x12, 0x0)
syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x8000)
r0 = gettid()
gettid()
r1 = getpgrp(r0)
ioprio_set$pid(0x2, r1, 0x0)
getpgrp(r1)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x20, 0x5, {{0x26, 0x4, 0x2, 0x18, 0x98, 0x68, 0x0, 0xb9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x5c, 0x98, 0x1, 0x0, [{@multicast2, 0x2}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x4}, {@multicast2}, {@empty, 0x1000}, {@multicast2, 0x40}, {@private=0xa010101, 0x9}, {@loopback, 0x1}]}, @rr={0x7, 0x27, 0xa0, [@broadcast, @private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast2, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})

[ 2605.234830][T26288]  do_syscall_64+0x2d/0x70
[ 2605.239288][T26288]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2605.245207][T26288] RIP: 0033:0x45e149
[ 2605.249121][T26288] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2605.268748][T26288] RSP: 002b:00007f54ed431c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 2605.277194][T26288] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149
[ 2605.285184][T26288] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003
[ 2605.293183][T26288] RBP: 00007f54ed431ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2605.301178][T26288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 2605.310314][T26288] R13: 00007fff428b7cef R14: 00007f54ed4329c0 R15: 000000000119bf8c
05:54:27 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
clock_gettime(0x6, &(0x7f0000000000))
clock_getres(0x1, &(0x7f0000000040))

05:54:27 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0)

05:54:27 executing program 0 (fault-call:1 fault-nth:4):
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:28 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)

05:54:28 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="f1d0313caf9076671a138438842e32bfe0860680a5f2e825aca6b491f66b29c434fa6089a496839165f6200ba7152d3f5cd2c90482dc65b860958b2898bd6f00659bce5b3794c6c4adae2d43d3ff7036cc27370b5871a7d3fb2ef8f280cf1d143fd31465a881a5836f90", 0x6a, 0xfc}], 0x2040, &(0x7f00000001c0)=ANY=[@ANYBLOB="7465616d30002c2a2d2d5b5d3a2f99d7e087e1847306400900c0a72b913c5b1a3babad00006d30002c2328292a285d212c0123265d2f2c2c7365636c6162347d2c70657265697445"])

[ 2605.592522][T26314] FAULT_INJECTION: forcing a failure.
[ 2605.592522][T26314] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2605.624390][T26314] CPU: 1 PID: 26314 Comm: syz-executor.0 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2605.634683][T26314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2605.644760][T26314] Call Trace:
[ 2605.648059][T26314]  dump_stack+0x107/0x163
[ 2605.652410][T26314]  should_fail.cold+0x5/0x1f
[ 2605.657025][T26314]  _copy_to_user+0x2c/0x150
[ 2605.661551][T26314]  simple_read_from_buffer+0xcc/0x160
[ 2605.666950][T26314]  proc_fail_nth_read+0x187/0x220
[ 2605.672588][T26314]  ? proc_fault_inject_read+0x220/0x220
[ 2605.678162][T26314]  ? security_file_permission+0x248/0x560
[ 2605.683921][T26314]  ? proc_fault_inject_read+0x220/0x220
[ 2605.690903][T26314]  vfs_read+0x1b5/0x570
[ 2605.695141][T26314]  ksys_read+0x12d/0x250
[ 2605.699467][T26314]  ? vfs_write+0xa80/0xa80
[ 2605.703910][T26314]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2605.710130][T26314]  do_syscall_64+0x2d/0x70
[ 2605.714573][T26314]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2605.720909][T26314] RIP: 0033:0x417a41
[ 2605.725197][T26314] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[ 2605.744958][T26314] RSP: 002b:00007f54ed431c70 EFLAGS: 00000293 ORIG_RAX: 0000000000000000
[ 2605.753402][T26314] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 0000000000417a41
[ 2605.761400][T26314] RDX: 000000000000000f RSI: 00007f54ed431cb0 RDI: 0000000000000004
[ 2605.769390][T26314] RBP: 00007f54ed431ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2605.777410][T26314] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
05:54:28 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
getresgid(&(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000040))

05:54:28 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

05:54:28 executing program 5:
socket$inet6(0xa, 0x12, 0x0)
syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x8000)
r0 = gettid()
gettid()
r1 = getpgrp(r0)
ioprio_set$pid(0x2, r1, 0x0)
getpgrp(r1)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x20, 0x5, {{0x26, 0x4, 0x2, 0x18, 0x98, 0x68, 0x0, 0xb9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x5c, 0x98, 0x1, 0x0, [{@multicast2, 0x2}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x4}, {@multicast2}, {@empty, 0x1000}, {@multicast2, 0x40}, {@private=0xa010101, 0x9}, {@loopback, 0x1}]}, @rr={0x7, 0x27, 0xa0, [@broadcast, @private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast2, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})

[ 2605.785878][T26314] R13: 00007fff428b7cef R14: 00007f54ed4329c0 R15: 000000000119bf8c
05:54:28 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)

05:54:28 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:28 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
pselect6(0x40, &(0x7f0000000000)={0xffffffffffff8000, 0x7, 0x3, 0x1, 0x4, 0x6, 0x8}, &(0x7f0000000040)={0x10001, 0x8, 0x1ff80, 0x0, 0x6ae, 0x0, 0x0, 0x9}, &(0x7f0000000080)={0x8, 0x7f, 0xfe, 0x8000, 0x0, 0x42, 0x7d, 0x6}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0xfff]}, 0x8})

05:54:28 executing program 3 (fault-call:0 fault-nth:0):
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

05:54:28 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="f1d0313caf9076671a138438842e32bfe0860680a5f2e825aca6b491f66b29c434fa6089a496839165f6200ba7152d3f5cd2c90482dc65b860958b2898bd6f00659bce5b3794c6c4adae2d43d3ff7036cc27370b5871a7d3fb2ef8f280cf1d143fd31465a881a5836f90", 0x6a, 0xfc}], 0x2040, &(0x7f00000001c0)=ANY=[@ANYBLOB="7465616d30002c2a2d2d5b5d3a2f99d7e087e1847306400900c0a72b913c5b1a3babad00006d30002c2328292a285d212c0123265d2f2c2c7365636c6162347d2c70657265697445"])

05:54:28 executing program 5:
socket$inet6(0xa, 0x12, 0x0)
syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x8000)
r0 = gettid()
gettid()
r1 = getpgrp(r0)
ioprio_set$pid(0x2, r1, 0x0)
getpgrp(r1)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x20, 0x5, {{0x26, 0x4, 0x2, 0x18, 0x98, 0x68, 0x0, 0xb9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x5c, 0x98, 0x1, 0x0, [{@multicast2, 0x2}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x4}, {@multicast2}, {@empty, 0x1000}, {@multicast2, 0x40}, {@private=0xa010101, 0x9}, {@loopback, 0x1}]}, @rr={0x7, 0x27, 0xa0, [@broadcast, @private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast2, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})

05:54:28 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)

[ 2606.090956][T26336] FAULT_INJECTION: forcing a failure.
[ 2606.090956][T26336] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2606.133126][T26336] CPU: 0 PID: 26336 Comm: syz-executor.3 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2606.142826][T26336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2606.152915][T26336] Call Trace:
[ 2606.156210][T26336]  dump_stack+0x107/0x163
[ 2606.160572][T26336]  should_fail.cold+0x5/0x1f
[ 2606.165281][T26336]  _copy_to_user+0x2c/0x150
[ 2606.169821][T26336]  simple_read_from_buffer+0xcc/0x160
[ 2606.176198][T26336]  proc_fail_nth_read+0x187/0x220
[ 2606.181252][T26336]  ? proc_fault_inject_read+0x220/0x220
[ 2606.186822][T26336]  ? security_file_permission+0x248/0x560
[ 2606.192598][T26336]  ? proc_fault_inject_read+0x220/0x220
[ 2606.198168][T26336]  vfs_read+0x1b5/0x570
[ 2606.203299][T26336]  ksys_read+0x12d/0x250
[ 2606.208912][T26336]  ? vfs_write+0xa80/0xa80
[ 2606.213352][T26336]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2606.219283][T26336]  do_syscall_64+0x2d/0x70
[ 2606.224846][T26336]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2606.230991][T26336] RIP: 0033:0x417a41
[ 2606.236307][T26336] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[ 2606.256044][T26336] RSP: 002b:00007f8443111c70 EFLAGS: 00000293 ORIG_RAX: 0000000000000000
[ 2606.264497][T26336] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 0000000000417a41
[ 2606.272491][T26336] RDX: 000000000000000f RSI: 00007f8443111cb0 RDI: 0000000000000003
05:54:28 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x2)

05:54:28 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
timer_create(0x2, &(0x7f0000000000)={0x0, 0x3d, 0x1}, &(0x7f0000000040)=<r0=>0x0)
timer_getoverrun(r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x28c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x17, &(0x7f0000000100)=""/23, 0x40f00, 0x5, [], r1, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x927, 0xb, 0x9, 0x3}, 0x10}, 0x78)

[ 2606.281357][T26336] RBP: 00007f8443111ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2606.289795][T26336] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[ 2606.297774][T26336] R13: 00007ffcd360deef R14: 00007f84431129c0 R15: 000000000119bf8c
05:54:28 executing program 4:
clock_gettime(0x0, 0x0)

05:54:29 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

05:54:29 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x4)

05:54:29 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="f1d0313caf9076671a138438842e32bfe0860680a5f2e825aca6b491f66b29c434fa6089a496839165f6200ba7152d3f5cd2c90482dc65b860958b2898bd6f00659bce5b3794c6c4adae2d43d3ff7036cc27370b5871a7d3fb2ef8f280cf1d143fd31465a881a5836f90", 0x6a, 0xfc}], 0x2040, &(0x7f00000001c0)=ANY=[@ANYBLOB="7465616d30002c2a2d2d5b5d3a2f99d7e087e1847306400900c0a72b913c5b1a3babad00006d30002c2328292a285d212c0123265d2f2c2c7365636c6162347d2c70657265697445"])

05:54:29 executing program 4:
clock_gettime(0x0, 0x0)

05:54:29 executing program 5:
socket$inet6(0xa, 0x12, 0x0)
syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x8000)
r0 = gettid()
gettid()
r1 = getpgrp(r0)
ioprio_set$pid(0x2, r1, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x20, 0x5, {{0x26, 0x4, 0x2, 0x18, 0x98, 0x68, 0x0, 0xb9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x5c, 0x98, 0x1, 0x0, [{@multicast2, 0x2}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x4}, {@multicast2}, {@empty, 0x1000}, {@multicast2, 0x40}, {@private=0xa010101, 0x9}, {@loopback, 0x1}]}, @rr={0x7, 0x27, 0xa0, [@broadcast, @private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast2, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})

05:54:29 executing program 2:
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in6=@empty}}}, &(0x7f0000000140)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'batadv_slave_0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c40)={&(0x7f00000013c0)=ANY=[@ANYBLOB="10040000", @ANYRES16=0x0, @ANYBLOB="010e29bd7000fddbdf09cd210fb666314e0b9eade024578f0fa93f654ee6ed90f7e3ee7ad1e718002a49ee9dc27f8153b1c15cef6b4e6dca55f9f517332e9468fbf2934e80c0d9868038b014ddf69ad41af27b6718c5924ee22b8a20ba35324396c3165d82ce69353ecf898d27e2215b05bfe1b8207a2110b9eba5197e6d57cfce3136eea24d615bcfc91d4a6a1b7c16bc2744c9ef3b6377156728a637237f03b4c62d98ba96f04af0d1201334499c51e9fef0b096a1a33d0bf2e6de91db339346503fe17104a61ffa2e1ab447b01b139e51aa72105a50854e24239e75e4a5930000000000000000000000000000000000000000000000000097e0b2e142aabdd5b607d7a83eaec8fb6acc11d1fea301f9d4b118af6b834ec4b0c73caa14a72b620fcaee6eb56c6ed58424b160710c54a010d2c99efc12e89c7cab679d7804efadbf9b8b89ed", @ANYRES32=0x0, @ANYBLOB="4c02028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000600000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004007504000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000fc5f46b3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000101000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004004b00000008000100", @ANYRES32=0x0, @ANYBLOB="a001028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400090000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=r2, @ANYBLOB], 0x410}, 0x1, 0x0, 0x0, 0x10}, 0x0)
clock_gettime(0xd4e8863c12c8ef23, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x700, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x210000, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000200)="2e660f1000baf80c66b8eae9aa8c66efbafc0cedf0102566b8018000000f23d80f21f86635000000500f23f8f30f1ecb660f38827432b839000f00d8660fc771806766c7442400fd8a00006766c74424020b0000806766c744240600000000670f01142467f20f1ee8", 0x69}], 0x1, 0x24, &(0x7f00000002c0)=[@vmwrite={0x8, 0x0, 0x2, 0x0, 0x3, 0x0, 0x3, 0x0, 0x7}], 0x1)
setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000700)=0x242c, 0x4)

05:54:29 executing program 3:
move_pages(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0)

05:54:29 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x18)

05:54:29 executing program 5:
socket$inet6(0xa, 0x12, 0x0)
syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x8000)
r0 = gettid()
gettid()
getpgrp(r0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x20, 0x5, {{0x26, 0x4, 0x2, 0x18, 0x98, 0x68, 0x0, 0xb9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x5c, 0x98, 0x1, 0x0, [{@multicast2, 0x2}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x4}, {@multicast2}, {@empty, 0x1000}, {@multicast2, 0x40}, {@private=0xa010101, 0x9}, {@loopback, 0x1}]}, @rr={0x7, 0x27, 0xa0, [@broadcast, @private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast2, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})

05:54:29 executing program 4:
clock_gettime(0x0, 0x0)

05:54:29 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2040, &(0x7f00000001c0)=ANY=[@ANYBLOB="7465616d30002c2a2d2d5b5d3a2f99d7e087e1847306400900c0a72b913c5b1a3babad00006d30002c2328292a285d212c0123265d2f2c2c7365636c6162347d2c70657265697445"])

05:54:29 executing program 3:
move_pages(0xffffffffffffffff, 0x700, 0x0, 0x0, 0x0, 0x0)

[ 2606.909740][ T9847] Bluetooth: hci3: command 0x0401 tx timeout
05:54:29 executing program 4 (fault-call:0 fault-nth:0):
clock_gettime(0xd4e8863c0000000b, 0x0)

05:54:29 executing program 2:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x20800, 0x0)
ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000140))
clock_gettime(0xd4e8863c12c8ef23, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x200000, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000080))
r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r5, 0x80685600, &(0x7f0000000180))
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@mcast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8)
r7 = getpgrp(0xffffffffffffffff)
wait4(r7, 0x0, 0x0, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000003c0)={{0x0, r6, 0xffffffffffffffff, 0x0, 0xee01, 0x21, 0x43}, 0x0, 0x0, 0x1, 0xe0, 0x5fc, 0x2, 0x88d, 0xba3b, 0x401, 0x81, r7})

05:54:29 executing program 5:
socket$inet6(0xa, 0x12, 0x0)
syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x8000)
gettid()
gettid()
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x20, 0x5, {{0x26, 0x4, 0x2, 0x18, 0x98, 0x68, 0x0, 0xb9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x5c, 0x98, 0x1, 0x0, [{@multicast2, 0x2}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x4}, {@multicast2}, {@empty, 0x1000}, {@multicast2, 0x40}, {@private=0xa010101, 0x9}, {@loopback, 0x1}]}, @rr={0x7, 0x27, 0xa0, [@broadcast, @private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast2, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})

05:54:29 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x1800)

05:54:29 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2040, &(0x7f00000001c0)=ANY=[@ANYBLOB="7465616d30002c2a2d2d5b5d3a2f99d7e087e1847306400900c0a72b913c5b1a3babad00006d30002c2328292a285d212c0123265d2f2c2c7365636c6162347d2c70657265697445"])

[ 2607.106834][T26389] FAULT_INJECTION: forcing a failure.
[ 2607.106834][T26389] name fail_usercopy, interval 1, probability 0, space 0, times 0
05:54:29 executing program 3:
move_pages(0xffffffffffffffff, 0x1000000, 0x0, 0x0, 0x0, 0x0)

05:54:29 executing program 2:
clock_gettime(0x1, 0x0)
sync()

[ 2607.186683][T26389] CPU: 0 PID: 26389 Comm: syz-executor.4 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2607.196380][T26389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2607.206465][T26389] Call Trace:
[ 2607.209768][T26389]  dump_stack+0x107/0x163
[ 2607.214138][T26389]  should_fail.cold+0x5/0x1f
[ 2607.218769][T26389]  _copy_to_user+0x2c/0x150
[ 2607.223302][T26389]  put_timespec64+0xb2/0x120
[ 2607.227920][T26389]  ? ns_to_timespec64+0xc0/0xc0
[ 2607.232794][T26389]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 2607.239059][T26389]  ? ns_to_timespec64+0x55/0xc0
[ 2607.243953][T26389]  __x64_sys_clock_gettime+0x1b6/0x260
[ 2607.249426][T26389]  ? __ia32_sys_clock_settime+0x280/0x280
[ 2607.255169][T26389]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2607.261094][T26389]  do_syscall_64+0x2d/0x70
[ 2607.265542][T26389]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2607.271465][T26389] RIP: 0033:0x45e149
05:54:29 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x1000000)

[ 2607.275377][T26389] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2607.295013][T26389] RSP: 002b:00007f7d50bf4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4
[ 2607.303455][T26389] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e149
[ 2607.311452][T26389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: d4e8863c0000000b
[ 2607.319439][T26389] RBP: 00007f7d50bf4ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2607.327425][T26389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
05:54:29 executing program 5:
socket$inet6(0xa, 0x12, 0x0)
syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x8000)
gettid()
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x20, 0x5, {{0x26, 0x4, 0x2, 0x18, 0x98, 0x68, 0x0, 0xb9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x5c, 0x98, 0x1, 0x0, [{@multicast2, 0x2}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x4}, {@multicast2}, {@empty, 0x1000}, {@multicast2, 0x40}, {@private=0xa010101, 0x9}, {@loopback, 0x1}]}, @rr={0x7, 0x27, 0xa0, [@broadcast, @private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast2, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})

[ 2607.335419][T26389] R13: 00007ffe3626becf R14: 00007f7d50bf59c0 R15: 000000000119bf8c
05:54:29 executing program 3:
move_pages(0xffffffffffffffff, 0x7000000, 0x0, 0x0, 0x0, 0x0)

05:54:30 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2040, &(0x7f00000001c0)=ANY=[@ANYBLOB="7465616d30002c2a2d2d5b5d3a2f99d7e087e1847306400900c0a72b913c5b1a3babad00006d30002c2328292a285d212c0123265d2f2c2c7365636c6162347d2c70657265697445"])

05:54:30 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x2000000)

05:54:30 executing program 4 (fault-call:0 fault-nth:1):
clock_gettime(0xd4e8863c0000000b, 0x0)

05:54:30 executing program 2:
clock_gettime(0x1, 0x0)

05:54:30 executing program 5:
socket$inet6(0xa, 0x12, 0x0)
syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x8000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x20, 0x5, {{0x26, 0x4, 0x2, 0x18, 0x98, 0x68, 0x0, 0xb9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x5c, 0x98, 0x1, 0x0, [{@multicast2, 0x2}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x4}, {@multicast2}, {@empty, 0x1000}, {@multicast2, 0x40}, {@private=0xa010101, 0x9}, {@loopback, 0x1}]}, @rr={0x7, 0x27, 0xa0, [@broadcast, @private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast2, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})

05:54:30 executing program 3:
move_pages(0xffffffffffffffff, 0x100000000000000, 0x0, 0x0, 0x0, 0x0)

05:54:30 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[@ANYBLOB="7465616d30002c2a2d2d5b5d3a2f99d7e087e1847306400900c0a72b913c5b1a3babad00006d30002c2328292a285d212c0123265d2f2c2c7365636c6162347d2c70657265697445"])

05:54:30 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x4000000)

05:54:30 executing program 3:
move_pages(0xffffffffffffffff, 0x700000000000000, 0x0, 0x0, 0x0, 0x0)

05:54:30 executing program 2:
clock_gettime(0x4, 0x0)

05:54:30 executing program 5:
socket$inet6(0xa, 0x12, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x20, 0x5, {{0x26, 0x4, 0x2, 0x18, 0x98, 0x68, 0x0, 0xb9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x5c, 0x98, 0x1, 0x0, [{@multicast2, 0x2}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x4}, {@multicast2}, {@empty, 0x1000}, {@multicast2, 0x40}, {@private=0xa010101, 0x9}, {@loopback, 0x1}]}, @rr={0x7, 0x27, 0xa0, [@broadcast, @private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast2, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})

[ 2607.960403][T26426] FAULT_INJECTION: forcing a failure.
[ 2607.960403][T26426] name fail_usercopy, interval 1, probability 0, space 0, times 0
05:54:30 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x18000000)

05:54:30 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7465616d30002c2a2d2d5b5d3a2f99d7e087e1847306400900c0a72b913c5b1a3babad00006d30002c2328292a285d212c0123265d2f2c2c7365636c6162347d2c70657265697445"])

[ 2608.015614][T26426] CPU: 0 PID: 26426 Comm: syz-executor.4 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2608.025313][T26426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2608.035399][T26426] Call Trace:
[ 2608.038700][T26426]  dump_stack+0x107/0x163
[ 2608.043066][T26426]  should_fail.cold+0x5/0x1f
[ 2608.047703][T26426]  _copy_to_user+0x2c/0x150
[ 2608.052248][T26426]  simple_read_from_buffer+0xcc/0x160
[ 2608.057663][T26426]  proc_fail_nth_read+0x187/0x220
[ 2608.062743][T26426]  ? proc_fault_inject_read+0x220/0x220
[ 2608.068316][T26426]  ? security_file_permission+0x248/0x560
[ 2608.074081][T26426]  ? proc_fault_inject_read+0x220/0x220
[ 2608.079655][T26426]  vfs_read+0x1b5/0x570
[ 2608.083846][T26426]  ksys_read+0x12d/0x250
[ 2608.088118][T26426]  ? vfs_write+0xa80/0xa80
[ 2608.092570][T26426]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2608.098490][T26426]  do_syscall_64+0x2d/0x70
[ 2608.102929][T26426]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2608.108846][T26426] RIP: 0033:0x417a41
[ 2608.112791][T26426] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[ 2608.132417][T26426] RSP: 002b:00007f7d50bf4c70 EFLAGS: 00000293 ORIG_RAX: 0000000000000000
[ 2608.140855][T26426] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 0000000000417a41
[ 2608.148843][T26426] RDX: 000000000000000f RSI: 00007f7d50bf4cb0 RDI: 0000000000000003
[ 2608.156837][T26426] RBP: 00007f7d50bf4ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2608.164827][T26426] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[ 2608.172824][T26426] R13: 00007ffe3626becf R14: 00007f7d50bf59c0 R15: 000000000119bf8c
05:54:30 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7)

[ 2608.263542][T26434] cramfs: Unknown parameter 'team0'
05:54:30 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)

05:54:30 executing program 2:
clock_gettime(0x6, 0x0)

05:54:30 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7465616d30002c2a2d2d5b5d3a2f99d7e087e1847306400900c0a72b913c5b1a3babad00006d30002c2328292a285d212c0123265d2f2c2c7365636c6162347d2c70657265697445"])

05:54:30 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x20, 0x5, {{0x26, 0x4, 0x2, 0x18, 0x98, 0x68, 0x0, 0xb9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x5c, 0x98, 0x1, 0x0, [{@multicast2, 0x2}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x4}, {@multicast2}, {@empty, 0x1000}, {@multicast2, 0x40}, {@private=0xa010101, 0x9}, {@loopback, 0x1}]}, @rr={0x7, 0x27, 0xa0, [@broadcast, @private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast2, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})

05:54:30 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x700)

05:54:30 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x1000000000000)

05:54:31 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000000)

[ 2608.527244][T26452] cramfs: Unknown parameter 'team0'
05:54:31 executing program 5:
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x20, 0x5, {{0x26, 0x4, 0x2, 0x18, 0x98, 0x68, 0x0, 0xb9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x5c, 0x98, 0x1, 0x0, [{@multicast2, 0x2}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x4}, {@multicast2}, {@empty, 0x1000}, {@multicast2, 0x40}, {@private=0xa010101, 0x9}, {@loopback, 0x1}]}, @rr={0x7, 0x27, 0xa0, [@broadcast, @private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast2, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})

05:54:31 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x100000000000000)

05:54:31 executing program 2:
clock_gettime(0x1, 0x0)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0)
clock_settime(0x3, &(0x7f0000000040))
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
clock_getres(0x0, &(0x7f0000000100))
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10)
r1 = socket(0x2c, 0x6, 0xa9)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video0\x00', 0x2, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000018c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="1000e3ff9c7ffbdbdf250e000007000001a100000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x20000000)

05:54:31 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7465616d30002c2a2d2d5b5d3a2f99d7e087e1847306400900c0a72b913c5b1a3babad00006d30002c2328292a285d212c0123265d2f2c2c7365636c6162347d2c70657265697445"])

05:54:31 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x230000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x2, 0xffffffffffffffff, 0x1})
shmget(0x3, 0x2000, 0x54000000, &(0x7f0000ffd000/0x2000)=nil)

05:54:31 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7000000)

05:54:31 executing program 5:
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x20, 0x5, {{0x26, 0x4, 0x2, 0x18, 0x98, 0x68, 0x0, 0xb9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x5c, 0x98, 0x1, 0x0, [{@multicast2, 0x2}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x4}, {@multicast2}, {@empty, 0x1000}, {@multicast2, 0x40}, {@private=0xa010101, 0x9}, {@loopback, 0x1}]}, @rr={0x7, 0x27, 0xa0, [@broadcast, @private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast2, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})

05:54:31 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x200000000000000)

[ 2608.863609][T26471] cramfs: Unknown parameter 'team0'
05:54:31 executing program 2:
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000))
clock_gettime(0xd4e8863c12c8ef23, 0x0)

05:54:31 executing program 4:
clock_gettime(0xc, 0x0)

05:54:31 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x400000000000000)

05:54:31 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x2040, 0x0)

05:54:31 executing program 5:
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x20, 0x5, {{0x26, 0x4, 0x2, 0x18, 0x98, 0x68, 0x0, 0xb9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x5c, 0x98, 0x1, 0x0, [{@multicast2, 0x2}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x4}, {@multicast2}, {@empty, 0x1000}, {@multicast2, 0x40}, {@private=0xa010101, 0x9}, {@loopback, 0x1}]}, @rr={0x7, 0x27, 0xa0, [@broadcast, @private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast2, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})

[ 2608.989626][ T9847] Bluetooth: hci3: command 0x0401 tx timeout
05:54:31 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000000000000)

05:54:31 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x1800000000000000)

05:54:31 executing program 4:
clock_gettime(0x3, 0x0)

05:54:31 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000), 0x4)

05:54:31 executing program 0:
r0 = socket$inet6(0xa, 0x80002, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:31 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0)

05:54:31 executing program 4:
clock_gettime(0x7, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000000)={0x3f, 0x3, 0x4, 0x10, 0x8, {}, {0x1, 0xc, 0xff, 0x0, 0x1, 0xd, "bd076120"}, 0x5, 0x0, @fd, 0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x7, 0x4, 0x0, 0x2, {0x77359400}, {0x3, 0x2, 0x6, 0x5, 0x40, 0x9b, "1ce34d7d"}, 0x8001, 0x2, @userptr=0x1, 0x9, 0x0, r1})

05:54:31 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x700000000000000)

05:54:31 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x2040, 0x0)

05:54:31 executing program 4:
setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000)=0x1, 0x4)
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000000040))

05:54:31 executing program 2:
socket$inet_tcp(0x2, 0x1, 0x0)
clock_gettime(0x4, 0x0)
set_tid_address(&(0x7f0000000040))
mmap$IORING_OFF_CQ_RING(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4, 0x12, 0xffffffffffffffff, 0x8000000)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000080))
setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000000), 0x4)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000000c0))

05:54:32 executing program 0:
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x4740, "070bac", 0x7, 0xfd})
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:32 executing program 3:
r0 = getpgrp(0xffffffffffffffff)
wait4(r0, 0x0, 0x0, 0x0)
move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

05:54:32 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0)

05:54:32 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = getpgrp(0xffffffffffffffff)
wait4(r0, 0x0, 0x0, 0x0)
move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000040)=[0x80], &(0x7f0000000080), 0x0)
socket$can_raw(0x1d, 0x3, 0x1)

05:54:32 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0)

05:54:32 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x0, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044005}, 0x20000080)

05:54:32 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2000, 0x0)
write$nbd(r1, &(0x7f00000000c0)={0x67446698, 0x0, 0x2, 0x0, 0x4, "6ff7de4252f646f49e45551745da2a5779df96ebc061ce8d8d67febc01fc5c024d6c604f2839c0d55a4ab485b83506e1bc1a353450a86c6c729e71f6317719c787c1366b8744ec505fbbd7ce9e71f03c617ea07ec252e8c3616cd06c8b89f34cfbab55b5251f39682cf3029f5bca197d1ba7c83b8005cb66b6dbc3b185f070e1c5fb264f5ff72891aee6d475bf317b83a159cc6a05071dbf327085eb5bffa98e71db0449a550cf9a80ffda2b3e64ed8d070eaa850993a8c6af5b8da3b8ec6c5abfe8c90869889d91f5870d4187ba9c1db4fa38c86a3141fde2ea64e6"}, 0xec)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4)

05:54:32 executing program 3:
r0 = getpgrp(0xffffffffffffffff)
wait4(r0, 0x0, 0x0, 0x0)
move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x2)

05:54:32 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x2040, 0x0)

05:54:32 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', 0x0})

05:54:32 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x100000c, 0x810, 0xffffffffffffffff, 0x8000000)
r1 = syz_io_uring_setup(0x60c, &(0x7f0000000000)={0x0, 0x6eb9, 0x20, 0x2, 0x256}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x2b12, &(0x7f0000000180)={0x0, 0x8759, 0x10, 0x3, 0x2ed, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)=<r2=>0x0)
syz_io_uring_submit(r0, r2, &(0x7f0000000140)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x1}, 0x0)

05:54:32 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x4540, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000180)={0x0, 0x4, 0x3, 0x7, 0x2, [0x8, 0x3, 0x40, 0x3], [0x800, 0x80000000, 0x80, 0x3000], [0x0, 0x40, 0xaa, 0x6], [0x100000000, 0x1f, 0x7267, 0x80]})
clock_getres(0x4, &(0x7f0000000240))
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000040)=0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
write$cgroup_pid(r2, &(0x7f0000000200)=0xffffffffffffffff, 0x12)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000280))

05:54:32 executing program 3:
getpgrp(0xffffffffffffffff)
r0 = getpgrp(0xffffffffffffffff)
wait4(r0, 0x0, 0x0, 0x0)
move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x6)
rt_sigpending(&(0x7f0000000000), 0x8)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00')
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', <r2=>0x0})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@private0, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@local}}}, &(0x7f0000000200)=0xe8)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1d8, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xffffffbd}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4040040}, 0x4)

05:54:32 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:32 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', 0x0})

05:54:32 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:32 executing program 2:
msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/80)
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x1, 0x50, &(0x7f00000000c0)=0x3})
clock_gettime(0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'})

05:54:32 executing program 3:
r0 = getpgrp(0xffffffffffffffff)
wait4(r0, 0x0, 0x0, 0x0)
move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x6)

05:54:32 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', 0x0})

05:54:32 executing program 3:
clock_gettime(0x0, &(0x7f0000000000))
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)=0x2)
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

05:54:33 executing program 0:
rt_sigprocmask(0x2, &(0x7f0000000000)={[0x9]}, 0x0, 0x8)
socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)

05:54:33 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x0, 0x8, 0x20, 0x5, {{0x26, 0x4, 0x2, 0x18, 0x98, 0x68, 0x0, 0xb9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x5c, 0x98, 0x1, 0x0, [{@multicast2, 0x2}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x4}, {@multicast2}, {@empty, 0x1000}, {@multicast2, 0x40}, {@private=0xa010101, 0x9}, {@loopback, 0x1}]}, @rr={0x7, 0x27, 0xa0, [@broadcast, @private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast2, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})

05:54:33 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', 0x0})

05:54:33 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @aes128, 0x2, @auto="e90000cd9ec85800"})
r0 = msgget(0x0, 0x200)
keyctl$set_reqkey_keyring(0xe, 0x3)
msgctl$IPC_RMID(r0, 0x0)
read$proc_mixer(0xffffffffffffffff, &(0x7f0000000000), 0x0)
msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000040)=""/238)

05:54:33 executing program 2:
r0 = getpgrp(0xffffffffffffffff)
r1 = gettid()
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0}}, {{@in6=@private1}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8)
msgctl$IPC_RMID(0x0, 0x0)
r4 = getpgrp(0xffffffffffffffff)
wait4(r4, 0x0, 0x0, 0x0)
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={{0x1, 0x0, 0xee01, r3, 0xffffffffffffffff, 0x87, 0x7}, 0x0, 0x0, 0x40, 0x4, 0x2, 0xfffffffffffffffb, 0x6, 0x4fc, 0xff, 0x5, r4, r0})
rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000000)={0x21, 0x4, 0x5})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', <r5=>0x0})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000600)=0xe8)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000640)={0x47c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x99}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x3f, 0x7f, 0x6, 0x89ba}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r2}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xcc}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xbe}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xd52}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x300000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x29f}}}]}}]}, 0x47c}, 0x1, 0x0, 0x0, 0x4004005}, 0x20000041)
clock_gettime(0xd4e8863c12c8ef23, 0x0)

05:54:33 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x10800, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x248000, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x3174, 0x84, 0x4, {0x3, @pix={0x7c, 0xfffffff7, 0x41564e57, 0x8, 0x3, 0x2, 0x6, 0xb62, 0x0, 0x8, 0x1}}, 0x84})
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000380)={0x3, 0x2, 'rq\"', 0x5, 0xbc})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)={'team0\x00', <r2=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f00000006c0)=0xe8)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000015c0)={0x0, @hci={0x1f, 0x2, 0x4}, @hci={0x1f, 0x0, 0x2}, @can={0x1d, <r4=>0x0}, 0x39, 0x0, 0x0, 0x0, 0x39, &(0x7f0000001580)='team_slave_1\x00', 0x80000000, 0x3, 0x7})
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001640)={{{@in6=@private2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000001740)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001780)={'batadv_slave_0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001840)={'team0\x00', <r7=>0x0})
openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001980)={'gre0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=<r8=>0x0, @ANYBLOB="0080002000000003000000ff4e1e00b800640000a0049078ac1414aa64010101940401000100442c4d33ac1414aaffffffff0000000000000007ac1414aafffff47bffffffff00000e95ac1414aa000000014424885000000fff0000004000000005000000a80000000700010000000002000001000194040000443ce1f00f6202d1b7a81e6bb8537f000001000000ffac1414aa00000101ac1414bb00000003e000000100000ca40a010102000000096401010000000001ac1414bb0000007f8907a6e00000020707bde0000001"]})
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000022c0)={&(0x7f0000000180), 0xc, &(0x7f0000002280)={&(0x7f00000019c0)={0x8bc, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xffffd320}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x115}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xed7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xb8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x5b0}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0xc0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xee12}}, {0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xffffff7b}}, {0x8}}}]}}]}, 0x8bc}, 0x1, 0x0, 0x0, 0x1}, 0x8050)
ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000100)=0x3)
clock_gettime(0xd4e8863c0000000b, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000003c0)={0x2, 0x1, 0x4, 0x100000, 0x7fffffff, {0x0, 0x2710}, {0x6, 0x0, 0xec, 0x6, 0x5, 0x0, "7a6b09de"}, 0x7f, 0x3, @planes=&(0x7f0000000300)={0x8000, 0x100, @userptr, 0x2}, 0x4})

05:54:33 executing program 0:
socket$inet6(0xa, 0x3, 0x9)
timer_gettime(0x0, &(0x7f0000000000))
r0 = getpgrp(0xffffffffffffffff)
r1 = getpgrp(r0)
wait4(r1, 0x0, 0x1000000, 0x0)
move_pages(r0, 0x7, &(0x7f0000000040)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil], &(0x7f00000000c0)=[0x800], &(0x7f0000000100)=[0x0], 0x4)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:33 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x20, 0x5, {{0x26, 0x4, 0x2, 0x18, 0x98, 0x68, 0x0, 0xb9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x5c, 0x98, 0x1, 0x0, [{@multicast2, 0x2}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x4}, {@multicast2}, {@empty, 0x1000}, {@multicast2, 0x40}, {@private=0xa010101, 0x9}, {@loopback, 0x1}]}, @rr={0x7, 0x27, 0xa0, [@broadcast, @private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast2, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})

05:54:33 executing program 1:
getpgrp(0xffffffffffffffff)
r0 = getpgrp(0xffffffffffffffff)
wait4(r0, 0x0, 0x0, 0x0)
move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x6)
rt_sigpending(&(0x7f0000000000), 0x8)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00')
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', <r2=>0x0})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@private0, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@local}}}, &(0x7f0000000200)=0xe8)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1d8, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xffffffbd}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4040040}, 0x4)

05:54:33 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0xa0800, 0x0)
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2, 0x30, r0, 0x83000000)
clock_gettime(0xd4e8863c12c8ef23, 0x0)

05:54:33 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
msgget(0x2, 0x1)

05:54:33 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
sync()

05:54:33 executing program 0:
socket$inet6(0xa, 0x3, 0x9)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0)

05:54:33 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x5, {{0x26, 0x4, 0x2, 0x18, 0x98, 0x68, 0x0, 0xb9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x5c, 0x98, 0x1, 0x0, [{@multicast2, 0x2}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x4}, {@multicast2}, {@empty, 0x1000}, {@multicast2, 0x40}, {@private=0xa010101, 0x9}, {@loopback, 0x1}]}, @rr={0x7, 0x27, 0xa0, [@broadcast, @private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast2, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})

05:54:33 executing program 2:
write$capi20(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x81, 0x8, 0x0, 0xdb, 0xef3}, 0x10)
clock_gettime(0x7, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

05:54:33 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x2040, 0x0)

05:54:33 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5)

05:54:33 executing program 4:
clock_gettime(0x0, 0x0)
clock_settime(0x4, &(0x7f0000000000)={0x77359400})
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000180), 0x4)
r2 = io_uring_setup(0x43fa, &(0x7f0000000040)={0x0, 0x20a7, 0x8, 0x1, 0x1ff})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x8010, r2, 0x8000000)
sendto$rose(r0, &(0x7f0000000780)="18f9175736000000000000", 0xb, 0x0, &(0x7f00000007c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x3, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}, 0x40)
prctl$PR_CAPBSET_DROP(0x18, 0x27)

05:54:33 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
clock_getres(0x0, &(0x7f0000000100))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
ioctl$NBD_CLEAR_QUE(r1, 0xab05)
r2 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x24440, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x73a71955c937cd15, 0x0, 0x0, 0x0, 0x23456}, 0x0)
ioctl$CAPI_SET_FLAGS(r2, 0x80044324, &(0x7f0000000040)=0x1)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

[ 2611.069387][ T9847] Bluetooth: hci3: command 0x0401 tx timeout
05:54:33 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x2, 0x18, 0x98, 0x68, 0x0, 0xb9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x5c, 0x98, 0x1, 0x0, [{@multicast2, 0x2}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x4}, {@multicast2}, {@empty, 0x1000}, {@multicast2, 0x40}, {@private=0xa010101, 0x9}, {@loopback, 0x1}]}, @rr={0x7, 0x27, 0xa0, [@broadcast, @private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast2, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})

05:54:33 executing program 3:
r0 = getpgrp(0xffffffffffffffff)
wait4(r0, 0x0, 0x0, 0x0)
r1 = getpgrp(0xffffffffffffffff)
wait4(r1, 0x0, 0x0, 0x0)
move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$CAPI_GET_ERRCODE(0xffffffffffffffff, 0x80024321, &(0x7f0000000000))

05:54:33 executing program 2:
clock_gettime(0x2, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x1, <r0=>0xffffffffffffffff, 0x1})
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000)
syz_io_uring_setup(0x7c33, &(0x7f00000000c0)={0x0, 0xf75b, 0x8, 0x1, 0x387}, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x5)
msgget$private(0x0, 0x24a)
ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000080)={0x0, 0x9, 0x8000, &(0x7f0000000040)=0x1})

05:54:33 executing program 1:
write$capi20(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x81, 0x8, 0x0, 0xdb, 0xef3}, 0x10)
clock_gettime(0x7, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

05:54:33 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x18, 0x98, 0x68, 0x0, 0xb9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x5c, 0x98, 0x1, 0x0, [{@multicast2, 0x2}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x4}, {@multicast2}, {@empty, 0x1000}, {@multicast2, 0x40}, {@private=0xa010101, 0x9}, {@loopback, 0x1}]}, @rr={0x7, 0x27, 0xa0, [@broadcast, @private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast2, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})

05:54:33 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x20400, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5, 0x2010, 0xffffffffffffffff, 0x8000000)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
write$capi20(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x1, 0xff, 0x82, 0x9}, 0x10)

05:54:33 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x1ff)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:33 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
clock_settime(0x7, &(0x7f0000000000)={0x77359400})

05:54:34 executing program 2:
clock_gettime(0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'})

05:54:34 executing program 1:
clock_gettime(0x0, 0x0)
clock_settime(0x4, &(0x7f0000000000)={0x77359400})
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000180), 0x4)
r2 = io_uring_setup(0x43fa, &(0x7f0000000040)={0x0, 0x20a7, 0x8, 0x1, 0x1ff})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x8010, r2, 0x8000000)
sendto$rose(r0, &(0x7f0000000780)="18f9175736000000000000", 0xb, 0x0, &(0x7f00000007c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x3, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}, 0x40)
prctl$PR_CAPBSET_DROP(0x18, 0x27)

05:54:34 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x68, 0x0, 0xb9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x5c, 0x98, 0x1, 0x0, [{@multicast2, 0x2}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x4}, {@multicast2}, {@empty, 0x1000}, {@multicast2, 0x40}, {@private=0xa010101, 0x9}, {@loopback, 0x1}]}, @rr={0x7, 0x27, 0xa0, [@broadcast, @private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast2, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})

05:54:34 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x568a, &(0x7f0000000000)={0x0, 0xc12c, 0x4, 0x0, 0x57}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffa000/0x2000)=nil, 0x2000})

05:54:34 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@private0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@dev}}}, &(0x7f0000000100)=0xe8)
setresuid(r1, 0xffffffffffffffff, 0xffffffffffffffff)
epoll_create1(0x80000)

05:54:34 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
r1 = socket(0x28, 0x2, 0x7)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0xeb2a31755b254a08)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:34 executing program 2:
clock_gettime(0x0, 0x0)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x80, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffff9c, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @adiantum, 0x4, [], @d='~\xb8\n\xf3\xf2N\xf0\x86rjL\xea:\x15L\xe0'})

05:54:34 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x4000000)

05:54:34 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0xb9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x5c, 0x98, 0x1, 0x0, [{@multicast2, 0x2}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x4}, {@multicast2}, {@empty, 0x1000}, {@multicast2, 0x40}, {@private=0xa010101, 0x9}, {@loopback, 0x1}]}, @rr={0x7, 0x27, 0xa0, [@broadcast, @private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast2, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})

05:54:34 executing program 4:
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}}, &(0x7f0000000100))
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000080)={0x6, &(0x7f0000000000)="ceeeb1dfba6e56e57749b98c3736f79e4c1dc821044144973ff8770786cea22ee27b5c6638127b60ae2198d4cad9dc79c1ad94093450cbbf6b1bef06277969bd5387aca1f97dc663957e1f2df6dd8d27baea900830f69a32f78494"})
timer_create(0x0, &(0x7f0000000140)={0x0, 0x3a, 0x2}, &(0x7f0000000180)=<r0=>0x0)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000300))
timer_getoverrun(r0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8)
setuid(r1)

05:54:34 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = msgget(0x0, 0x200)
syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x80)
msgctl$IPC_RMID(r0, 0x0)
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x28800)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0)
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000000)=""/67)

05:54:34 executing program 0:
r0 = socket$inet6(0xa, 0x4, 0x1)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x401)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@initdev, @in6=@private2}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000000200)=0xe8)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffff9c, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x1, @desc4='\x85\xba\xa1t\xf0\xcb\x11B'})

05:54:34 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0xfffffffffffffe8a, 0x0, 0x400, 0x70bd29, 0x25dfdc01, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}}, 0x8000050)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1})
clock_gettime(0xd4e8863c12c8ef23, 0x0)

05:54:34 executing program 1 (fault-call:0 fault-nth:0):
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:34 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x5c, 0x98, 0x1, 0x0, [{@multicast2, 0x2}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x4}, {@multicast2}, {@empty, 0x1000}, {@multicast2, 0x40}, {@private=0xa010101, 0x9}, {@loopback, 0x1}]}, @rr={0x7, 0x27, 0xa0, [@broadcast, @private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast2, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})

05:54:34 executing program 4:
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f0000000100)=0xe8)
clock_gettime(0xd4e8863c0000000b, 0x0)

05:54:34 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
keyctl$join(0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0)

[ 2612.054366][T26718] FAULT_INJECTION: forcing a failure.
[ 2612.054366][T26718] name failslab, interval 1, probability 0, space 0, times 0
05:54:34 executing program 2:
clock_gettime(0x3, 0x0)

[ 2612.135316][T26718] CPU: 1 PID: 26718 Comm: syz-executor.1 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2612.145018][T26718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2612.155106][T26718] Call Trace:
[ 2612.158401][T26718]  dump_stack+0x107/0x163
[ 2612.162766][T26718]  should_fail.cold+0x5/0x1f
[ 2612.167395][T26718]  ? __do_sys_memfd_create+0xf7/0x5a0
[ 2612.172795][T26718]  should_failslab+0x5/0x10
[ 2612.177326][T26718]  __kmalloc+0x72/0x310
[ 2612.181506][T26718]  __do_sys_memfd_create+0xf7/0x5a0
[ 2612.186750][T26718]  ? hmm_vma_walk_hugetlb_entry+0x8a0/0x8a0
[ 2612.192698][T26718]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2612.198628][T26718]  do_syscall_64+0x2d/0x70
[ 2612.203072][T26718]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2612.208995][T26718] RIP: 0033:0x45e149
[ 2612.212898][T26718] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
05:54:34 executing program 4:
clock_gettime(0x3, 0x0)

05:54:34 executing program 3:
ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x4f7e)
r0 = getpgrp(0xffffffffffffffff)
wait4(r0, 0x0, 0x0, 0x0)
move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000002000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10)

05:54:34 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
ioctl$CAPI_NCCI_GETUNIT(0xffffffffffffffff, 0x80044327, &(0x7f0000000000)=0x80000000)

05:54:34 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x5c, 0x98, 0x1, 0x0, [{@multicast2, 0x2}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x4}, {@multicast2}, {@empty, 0x1000}, {@multicast2, 0x40}, {@private=0xa010101, 0x9}, {@loopback, 0x1}]}, @rr={0x7, 0x27, 0xa0, [@broadcast, @private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast2, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})

[ 2612.232529][T26718] RSP: 002b:00007f4bcc935a18 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2612.240971][T26718] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045e149
[ 2612.248980][T26718] RDX: 00007f4bcc935ad0 RSI: 0000000000000000 RDI: 00000000004c2bc7
[ 2612.256963][T26718] RBP: 0000000000000000 R08: 00007f4bcc935ac8 R09: 0000000000000000
[ 2612.264956][T26718] R10: 00007f4bcc935acc R11: 0000000000000246 R12: 0000000000000000
[ 2612.272952][T26718] R13: 0000000020000040 R14: 0000000020000100 R15: 00000000200001c0
05:54:34 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x9)
ioctl$CAPI_GET_ERRCODE(0xffffffffffffffff, 0x80024321, &(0x7f00000000c0))
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10)

05:54:35 executing program 4:
clock_gettime(0x2, 0x0)
personality(0x2000000)
socket$inet_tcp(0x2, 0x1, 0x0)

05:54:35 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/10, 0xa}, {&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f0000000100)=""/152, 0x98}], 0x3}, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000280)=0x10)

05:54:35 executing program 1 (fault-call:0 fault-nth:1):
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:35 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x18})
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
clock_gettime(0x1, &(0x7f00000001c0))
pselect6(0x40, &(0x7f0000000000)={0x6, 0x80000001, 0x7, 0x8, 0x9, 0x57, 0xd0c4, 0x9}, &(0x7f0000000040)={0x9, 0x6, 0xfffffffffffff442, 0x7, 0x9, 0x34e, 0x0, 0x246}, &(0x7f0000000080)={0x0, 0x8, 0x6, 0x8001, 0x80000000, 0x527, 0x2, 0xffffffff}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x200]}, 0x8})

05:54:35 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x5c, 0x98, 0x1, 0x0, [{@multicast2, 0x2}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x4}, {@multicast2}, {@empty, 0x1000}, {@multicast2, 0x40}, {@private=0xa010101, 0x9}, {@loopback, 0x1}]}, @rr={0x7, 0x27, 0xa0, [@broadcast, @private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast2, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})

05:54:35 executing program 4:
clock_gettime(0x7, 0x0)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000400000/0xc00000)=nil, 0xc00000})
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ae7000/0x1000)=nil, 0x1000}, 0x1})

05:54:35 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
clock_getres(0x3, &(0x7f0000000180))
ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x3f, 0x527, 0x1, {0x2, @win={{0x29, 0x3, 0x6, 0x4}, 0x2, 0x1, &(0x7f0000000000)={{0x102, 0x1, 0x101, 0xfffffffe}}, 0x5, &(0x7f0000000040)="9b2d33d9ed5449a750aa5c342e23596c6c76d59d9c5ecdc15c2a53943844220090031ea7fbbfc203d0c157c3849b701d68d61e990cc9e617b76efa56", 0x2}}, 0x7})
socket$inet_smc(0x2b, 0x1, 0x0)

05:54:35 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000015c0)={'batadv0\x00', <r1=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000019c0)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000001ac0)=0xe8)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x64, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4800}, 0x10)
getpgrp(0x0)

05:54:35 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1d, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x5c, 0x98, 0x1, 0x0, [{@multicast2, 0x2}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x4}, {@multicast2}, {@empty, 0x1000}, {@multicast2, 0x40}, {@private=0xa010101, 0x9}, {@loopback, 0x1}]}]}}}}})

[ 2612.931455][T26769] FAULT_INJECTION: forcing a failure.
[ 2612.931455][T26769] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2612.988194][T26769] CPU: 1 PID: 26769 Comm: syz-executor.1 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2612.997892][T26769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2613.007975][T26769] Call Trace:
[ 2613.011276][T26769]  dump_stack+0x107/0x163
[ 2613.015642][T26769]  should_fail.cold+0x5/0x1f
[ 2613.020270][T26769]  _copy_from_user+0x2c/0x180
[ 2613.024982][T26769]  __do_sys_memfd_create+0x169/0x5a0
[ 2613.030302][T26769]  ? hmm_vma_walk_hugetlb_entry+0x8a0/0x8a0
[ 2613.036234][T26769]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2613.042163][T26769]  do_syscall_64+0x2d/0x70
[ 2613.046619][T26769]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2613.052551][T26769] RIP: 0033:0x45e149
[ 2613.056467][T26769] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2613.076104][T26769] RSP: 002b:00007f4bcc935a18 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
05:54:35 executing program 0:
r0 = socket$inet6(0xa, 0x4, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:35 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
io_uring_setup(0x333a, &(0x7f0000000180)={0x0, 0x191d, 0x10, 0x0, 0x2bb})
socket$inet_smc(0x2b, 0x1, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xe)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @phonet={0x23, 0x9, 0x0, 0x7}, @generic={0x6, "ae97f7077799b8250b1811ef2e00"}, @xdp={0x2c, 0x6, 0x0, 0x3f}, 0x4400, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='veth1_to_hsr\x00', 0x5, 0x2, 0x8})
getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
setresuid(r1, 0xffffffffffffffff, 0xffffffffffffffff)

05:54:35 executing program 2:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00')
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x96}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x4040844)
clock_gettime(0xd4e8863c12c8ef23, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0)

[ 2613.084549][T26769] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045e149
[ 2613.092561][T26769] RDX: 00007f4bcc935ad0 RSI: 0000000000000000 RDI: 00000000004c2bc7
[ 2613.100563][T26769] RBP: 0000000000000000 R08: 00007f4bcc935ac8 R09: 0000000000000000
[ 2613.108554][T26769] R10: 00007f4bcc935acc R11: 0000000000000246 R12: 0000000000000000
[ 2613.116546][T26769] R13: 0000000020000040 R14: 0000000020000100 R15: 00000000200001c0
05:54:35 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = msgget(0x1, 0x142)
msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000000)=""/65)
socket$inet6(0xa, 0xd, 0x4)

[ 2613.149852][T31771] Bluetooth: hci3: command 0x0401 tx timeout
05:54:35 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop]}}}}})

05:54:35 executing program 1 (fault-call:0 fault-nth:2):
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:35 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x252000, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000040)={0x100000000, &(0x7f00000000c0)="915f7a7796088d4cf2d28ec0d0b2036c6af63a1eaa5253ef16"})

05:54:36 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
write$capi20(r0, &(0x7f0000000000)={0x10, 0x9, 0x84, 0x803791ffe5cf3f1c, 0x104, 0x7}, 0x10)
r1 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:36 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})

05:54:36 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x22)

05:54:36 executing program 3:
r0 = getpgrp(0xffffffffffffffff)
r1 = getpgrp(r0)
wait4(r1, 0x0, 0x0, 0x0)
getpgrp(r1)
r2 = gettid()
r3 = getpgrp(0xffffffffffffffff)
wait4(r3, 0x0, 0x0, 0x0)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000080))
ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0xa)
clock_gettime(0x0, &(0x7f0000000040)={<r5=>0x0, <r6=>0x0})
ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x8ff, 0x1, 0x4, 0xe001, 0x10001, {r5, r6/1000+10000}, {0x1, 0x1, 0x40, 0x80, 0x1f, 0xe}, 0x3f, 0x3, @planes=&(0x7f0000000080)={0x5, 0x800, @userptr=0x81}, 0x4c, 0x0, <r7=>0xffffffffffffffff})
r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r8, 0x80685600, &(0x7f0000000080))
syz_mount_image$cramfs(0x0, &(0x7f0000000100)='./file0\x00', 0x6, 0x6, &(0x7f0000000640)=[{&(0x7f0000000140)="d12b7b567d9b7b1d8fd2620ac9886c3e3c3f4119e919ed5a2e83da16205fe569191a006c2f17ee14ba1e40d702fbcb47c1ad518fa4db18817179f9d824d1224ab675ab2113408c798b80d5", 0x4b}, {0x0, 0x0, 0x9}, {&(0x7f0000000300), 0x0, 0x5}, {&(0x7f0000000400)="c7b56338d71be0598b6bc4274b", 0xd, 0x1}, {&(0x7f0000000440)="23dc6fde7d4358890cd2c54d64aba30222fe8d88f548ea9ca7eaadc3cad63a3c9572bae8fe12b806523ae9cd926ead784f6c7441dbac4c0e429cd252264a028c6b997cda6026009b7835812d04b935f11407a155621392c8d86ce9172544d33fffd9983b9859c7d1784b66057ffc812801725ea1d8fae9423bfa86f2f742004f8d6db8ad0fb3466f8356fc5596bf6a1024fa192ab3f5ff1a0dd7e460051f881257e065097f6abfceb90fbd3c4b331ae2ad6fb5321bcd679e958627433b105dc3cc4816701fff15", 0xc7, 0x1}, {&(0x7f0000000540)="ea4576eb05f2f2fd99baacd6fd97bc48cf84ba61dcdfed54d232215609e140631f2e132e2c030baa86e4bfa3ee1276560bd1e33e5c54672fbc9995288cc3a06f2c0e93489d6e1a9334525b60824471380a956db06b1fa0c072fd2d88b6a7af88019590b276", 0x65, 0x80000001}], 0x400, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(r8, 0xc0585609, &(0x7f00000001c0)={0x1000, 0x1, 0x4, 0x64864, 0x0, {}, {0x3, 0xc, 0xf6, 0x2, 0x8, 0x8, "48124f98"}, 0x3, 0x2, @planes=&(0x7f0000000000)={0x40, 0x6, @mem_offset=0x8001, 0xa5}, 0x101, 0x0, r7})
move_pages(r2, 0x0, 0x0, 0x0, 0x0, 0x6)

[ 2613.535724][T26805] FAULT_INJECTION: forcing a failure.
[ 2613.535724][T26805] name failslab, interval 1, probability 0, space 0, times 0
05:54:36 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
io_uring_setup(0x3e3f, &(0x7f0000000000)={0x0, 0xe092, 0x8, 0x1, 0x3e3})

[ 2613.612263][T26805] CPU: 0 PID: 26805 Comm: syz-executor.1 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2613.622066][T26805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2613.632147][T26805] Call Trace:
[ 2613.635443][T26805]  dump_stack+0x107/0x163
[ 2613.639807][T26805]  should_fail.cold+0x5/0x1f
[ 2613.644426][T26805]  ? shmem_alloc_inode+0x18/0x40
[ 2613.649393][T26805]  ? shmem_alloc_inode+0x18/0x40
[ 2613.654354][T26805]  should_failslab+0x5/0x10
[ 2613.658882][T26805]  kmem_cache_alloc+0x5e/0x380
[ 2613.663672][T26805]  ? shmem_destroy_inode+0x70/0x70
[ 2613.665863][T26814] loop3: detected capacity change from 264192 to 0
[ 2613.668800][T26805]  shmem_alloc_inode+0x18/0x40
[ 2613.668830][T26805]  ? shmem_destroy_inode+0x70/0x70
[ 2613.668854][T26805]  alloc_inode+0x61/0x230
[ 2613.668877][T26805]  new_inode+0x27/0x2f0
[ 2613.668928][T26805]  shmem_get_inode+0x195/0xc30
[ 2613.668955][T26805]  __shmem_file_setup+0xb8/0x310
[ 2613.668975][T26805]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 2613.710089][T26805]  __do_sys_memfd_create+0x26b/0x5a0
[ 2613.715854][T26805]  ? hmm_vma_walk_hugetlb_entry+0x8a0/0x8a0
[ 2613.721793][T26805]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2613.727735][T26805]  do_syscall_64+0x2d/0x70
[ 2613.732175][T26805]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2613.738086][T26805] RIP: 0033:0x45e149
[ 2613.741986][T26805] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
05:54:36 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000015c0)={'batadv0\x00', <r1=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000019c0)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000001ac0)=0xe8)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x64, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4800}, 0x10)
getpgrp(0x0)

[ 2613.761698][T26805] RSP: 002b:00007f4bcc935a18 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2613.770236][T26805] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045e149
[ 2613.778320][T26805] RDX: 00007f4bcc935ad0 RSI: 0000000000000000 RDI: 00000000004c2bc7
[ 2613.786331][T26805] RBP: 0000000000000000 R08: 00007f4bcc935ac8 R09: 0000000000000000
[ 2613.794316][T26805] R10: 00007f4bcc935acc R11: 0000000000000246 R12: 0000000000000000
[ 2613.802299][T26805] R13: 0000000020000040 R14: 0000000020000100 R15: 00000000200001c0
05:54:36 executing program 2:
mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000100)=0xffffffff80000001, 0x5, 0x1)
mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8)
getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000))
clock_gettime(0xd4e8863c12c8ef23, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))

05:54:36 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
recvmsg$can_raw(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000380)=""/211, 0xd3}, {&(0x7f0000000480)=""/155, 0x9b}], 0x3, &(0x7f0000000580)=""/135, 0x87}, 0x40001022)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_ext={0x1c, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@jmp={0x5, 0x1, 0xd, 0x6, 0x7, 0xfffffffffffffff4, 0x1}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @generic={0x6, 0x0, 0x5, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x7c}, @call={0x85, 0x0, 0x0, 0x37}, @call={0x85, 0x0, 0x0, 0x2d}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x64, &(0x7f0000000100)=""/100, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x6, 0x4, 0x800}, 0x10, 0x1f190}, 0x78)

05:54:36 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
clock_gettime(0x6, &(0x7f0000000000))

[ 2613.919928][T26824] loop3: detected capacity change from 264192 to 0
05:54:36 executing program 1 (fault-call:0 fault-nth:3):
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:36 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000), 0x401, 0x0)

05:54:36 executing program 5:
ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x4f7e)
r0 = getpgrp(0xffffffffffffffff)
wait4(r0, 0x0, 0x0, 0x0)
move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000002000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10)

05:54:36 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x2000, 0x0)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x4, 0x4)

05:54:36 executing program 0:
socket$inet6(0xa, 0x3, 0x9)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$nbd(r1, &(0x7f0000000580)={0x67446698, 0x1, 0x0, 0x4, 0x1, "9aec53aa319f7abe0ee3a2971c81cc274ce9054a25c587ddb97efc4ebc5c39ba425496aad8e51014eca9c5a7d1793b024aef55098a1d146bfa635819d1e5387393dfd37e8e2519ba76c2c2d1f3d099cfa7cc82be8fff012f08703a8122741208aff6543c600eb8a506060209c44025a7ba4da0bc6fd0a8b92a9fe95f778fba209ad43e433fa2cde68f4f20a5803799367ff133a477c77e257b302189aa24e1d94937fd96431643059563268bb043ee5b916e0ae53e524257ea48c668018924"}, 0xcf)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)=""/234, 0xea}, {&(0x7f0000000280)=""/181, 0xb5}, {&(0x7f0000000340)=""/211, 0xd3}], 0x3, &(0x7f0000000440)=""/165, 0xa5}, 0x40000020)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

[ 2614.120151][T26840] FAULT_INJECTION: forcing a failure.
[ 2614.120151][T26840] name failslab, interval 1, probability 0, space 0, times 0
[ 2614.163065][T26840] CPU: 1 PID: 26840 Comm: syz-executor.1 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2614.172779][T26840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2614.182841][T26840] Call Trace:
[ 2614.186111][T26840]  dump_stack+0x107/0x163
[ 2614.190442][T26840]  should_fail.cold+0x5/0x1f
[ 2614.195024][T26840]  ? security_inode_alloc+0x34/0x160
[ 2614.200305][T26840]  ? security_inode_alloc+0x34/0x160
[ 2614.205579][T26840]  should_failslab+0x5/0x10
[ 2614.210077][T26840]  kmem_cache_alloc+0x5e/0x380
[ 2614.214837][T26840]  security_inode_alloc+0x34/0x160
[ 2614.220078][T26840]  inode_init_always+0x5a9/0xdb0
[ 2614.225019][T26840]  alloc_inode+0x82/0x230
[ 2614.229340][T26840]  new_inode+0x27/0x2f0
[ 2614.233528][T26840]  shmem_get_inode+0x195/0xc30
[ 2614.238287][T26840]  __shmem_file_setup+0xb8/0x310
[ 2614.243233][T26840]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 2614.249475][T26840]  __do_sys_memfd_create+0x26b/0x5a0
[ 2614.254787][T26840]  ? hmm_vma_walk_hugetlb_entry+0x8a0/0x8a0
[ 2614.260678][T26840]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2614.266596][T26840]  do_syscall_64+0x2d/0x70
[ 2614.271003][T26840]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2614.276890][T26840] RIP: 0033:0x45e149
[ 2614.280776][T26840] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2614.300467][T26840] RSP: 002b:00007f4bcc935a18 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
05:54:36 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x800, 0x100000001, 0x7, 0x5, 0x200, 0x6, 0x100000001, 0x9}, &(0x7f0000000040)={0xe00, 0xf00, 0x3, 0x8001, 0x7, 0x4, 0xfffffffffffffe01, 0xffffffffffffa66b}, &(0x7f0000000080)={0x101, 0x100000001, 0x7, 0xab8, 0x3, 0x80, 0x7, 0x2}, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x4]}, 0x8})
gettid()
r0 = syz_open_dev$ndb(&(0x7f0000000180)='/dev/nbd#\x00', 0x0, 0x1c100)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x100000000)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f00000000c0)=0x7, 0x8)

[ 2614.308890][T26840] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045e149
[ 2614.316850][T26840] RDX: 00007f4bcc935ad0 RSI: 0000000000000000 RDI: 00000000004c2bc7
[ 2614.324813][T26840] RBP: 0000000000000000 R08: 00007f4bcc935ac8 R09: 0000000000000000
[ 2614.332773][T26840] R10: 00007f4bcc935acc R11: 0000000000000246 R12: 0000000000000000
[ 2614.340734][T26840] R13: 0000000020000040 R14: 0000000020000100 R15: 00000000200001c0
05:54:36 executing program 2:
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x212000)
r0 = gettid()
getresuid(&(0x7f0000001400), &(0x7f0000001440), &(0x7f0000001480)=<r1=>0x0)
syz_mount_image$cramfs(&(0x7f0000000080)='cramfs\x00', &(0x7f00000000c0)='./file0\x00', 0x100, 0x4, &(0x7f0000001280)=[{&(0x7f0000000100)="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", 0x1000, 0x4}, {&(0x7f0000001100)="94e0896f80a92b68bba37ad568784dc6c9ed34fa7c97f5375d36996ea4c7c180ca61bad465ac233e532b922f24c09eb53773efb8d4a6955c32deef4f170baeae82b998d0c389c6626c4008607243b61542095d8cb9eaf232f20be7fd8c6033d4c36cb1050c9a04aff0829b73d259c9fa31057398d9bb4c2dddde07eef3a93029f6b379", 0x83, 0x27a5}, {&(0x7f00000011c0)="75a4c2273c83b834eeb3376adf89d7eebbc58b080113bebea2e15242d382bf7d4e6b4d52e3f5256f76568a47772c02a781ed02babf4880dde7cc854dc29b8906c8c2faf6bde90541", 0x48, 0xffff}, {&(0x7f0000001240)="cb0242db8e2a9fddb34207ae163e943fb2ce3816dcdd357380c19e85febe4eec4ff513b9f749cca234574c50022d03b203526f4c42a558932bacee", 0x3b, 0x2}], 0x1000000, &(0x7f00000014c0)={[{'/dev/snd/pcmC#D#c\x00'}, {'/dev/snd/pcmC#D#c\x00'}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@pcr={'pcr', 0x3d, 0x8}}, {@euid_gt={'euid>', r1}}, {@fowner_eq={'fowner'}}, {@fowner_lt={'fowner<', 0xee00}}]})
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r0, 0x12)
clock_gettime(0x4, 0x0)

05:54:36 executing program 1 (fault-call:0 fault-nth:4):
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:37 executing program 4:
clock_gettime(0x4, 0x0)
syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x20c01)
pselect6(0x40, &(0x7f0000000080)={0x80000000, 0x7, 0x2, 0x4ca1, 0xfffffffffffffffa, 0x6, 0xe50b, 0x9}, &(0x7f00000000c0)={0xb0, 0x2, 0x4bb9, 0x0, 0x6, 0xaca0, 0x3, 0x3b}, &(0x7f0000000100)={0x1f, 0x5, 0x1f, 0x9, 0x5374, 0x0, 0x4cb, 0x9}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x10000]}, 0x8})
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x101, 0x298000)

05:54:37 executing program 2:
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card3/oss_mixer\x00', 0x400, 0x0)
clock_gettime(0xd4e8863c12c8ef23, 0x0)

05:54:37 executing program 5:
mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000100)=0xffffffff80000001, 0x5, 0x1)
mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8)
getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000))
clock_gettime(0xd4e8863c12c8ef23, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))

[ 2614.592772][T26856] FAULT_INJECTION: forcing a failure.
[ 2614.592772][T26856] name failslab, interval 1, probability 0, space 0, times 0
[ 2614.678645][T26856] CPU: 0 PID: 26856 Comm: syz-executor.1 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2614.688500][T26856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2614.699415][T26856] Call Trace:
[ 2614.702715][T26856]  dump_stack+0x107/0x163
[ 2614.707080][T26856]  should_fail.cold+0x5/0x1f
[ 2614.711698][T26856]  ? __d_alloc+0x2a/0x950
[ 2614.716059][T26856]  ? __d_alloc+0x2a/0x950
[ 2614.721388][T26856]  should_failslab+0x5/0x10
05:54:37 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/50)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000040)=0xffffffff, 0x4)
timer_create(0x7, &(0x7f00000001c0)={0x0, 0x9, 0x2, @thr={&(0x7f0000000080)="f9f4f923749e88be9dce619d77832c27ebb92a1b584476c7ffef5fa780017fe952d9f4e280ff3f1d28f943fc10c29ce676833d9fe391a61660351bb139632b13494732f360ea43f3a396466df721ae9a9f0aeed27dd3cdd9f29211e2cbaf5fc0a35fcf8e043613a4483bbf0e8baa9cafdba69b76b4d25aa6c16b57321b91ff1341444f536df4168eab1376e9cb76f14bf437efeb01b09c66f4312c0c6c9e186db8b376045c71c0495329795906f6d51a46272f52e7ffe8faf7a879b3033b353170ef6dc6489df322d5b5037b6f1f6a6cafef99e1", &(0x7f0000000180)="7ada7a5e44ccdfbbf7e7c45fa114"}}, &(0x7f0000000200)=<r1=>0x0)
clock_gettime(0x0, &(0x7f0000000240)={<r2=>0x0, <r3=>0x0})
timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x3938700}, {r2, r3+60000000}}, &(0x7f00000002c0))

[ 2614.726762][T26856]  kmem_cache_alloc+0x5e/0x380
[ 2614.732623][T26856]  ? lockdep_hardirqs_on+0x79/0x100
[ 2614.738989][T26856]  __d_alloc+0x2a/0x950
[ 2614.744022][T26856]  d_alloc_pseudo+0x19/0x70
[ 2614.749672][T26856]  alloc_file_pseudo+0xc6/0x250
[ 2614.755796][T26856]  ? alloc_file+0x5d0/0x5d0
[ 2614.760336][T26856]  ? shmem_get_inode+0x593/0xc30
[ 2614.766238][T26856]  __shmem_file_setup+0x144/0x310
[ 2614.771290][T26856]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 2614.777574][T26856]  __do_sys_memfd_create+0x26b/0x5a0
[ 2614.782882][T26856]  ? hmm_vma_walk_hugetlb_entry+0x8a0/0x8a0
[ 2614.788798][T26856]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2614.794882][T26856]  do_syscall_64+0x2d/0x70
[ 2614.799374][T26856]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2614.805546][T26856] RIP: 0033:0x45e149
[ 2614.809569][T26856] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
05:54:37 executing program 0:
r0 = socket$inet6(0xa, 0x800, 0x8004)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r1 = userfaultfd(0x800)
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000003000/0x2000)=nil, 0x2000})

05:54:37 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000002c0)={0x4, 0x1, 0x4, "93834e29b0cd0540196a89dec77a879d06c492c000069a9a5b4382c84bb0d54a", 0x30323953})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00')
ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000380)="c3ab280214da02807763fc67a190b710f2e2966209785ef5960c2514e9effd95ddcd0076a2a0336a335141b2a25a81525fe0afb17f44576e72bfe345e5b570af951f555bbe14d76681a980fe023f1d7fe305f00f6b88dc428b0b18b0082a655564c385ec5ff5e54bdc1cb6992cd7739464ca6566cce718982cca42a6ec8b5deb70dfcc2d3717a04a1be4033a119ba0ac66298e1391aa2e32031439c2d9f4370bf1f8627ae4e9a4190a97e247adec90c9de2a52bddf6c690e89e653a4fd75141b19f49e82d7fa23f75552fe0cb1743c087609f80a5279f31f3961600418e76f513883546dd4575e2e47c3087abaf5ed602182747072dba3d4ddf60abb32f8e94504b33d6dccc951f717b1c8308de8cfe23e608e94df7cd7de67d8a87a67e1250bc216654e168346a580")
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={0x0, @sco, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x40000000}, @rc={0x1f, @any, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)='virt_wifi0\x00', 0xa6c9, 0x5, 0x10})
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x45850}, 0x480c2)
clock_gettime(0xd4e8863c0000000b, 0x0)
setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000140)=0x5, 0x4)

[ 2614.829945][T26856] RSP: 002b:00007f4bcc935a18 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2614.838753][T26856] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045e149
[ 2614.847613][T26856] RDX: 00007f4bcc935ad0 RSI: 0000000000000000 RDI: 00000000004c2bc7
[ 2614.855605][T26856] RBP: 0000000000000000 R08: 00007f4bcc935ac8 R09: 0000000000000000
[ 2614.863597][T26856] R10: 00007f4bcc935acc R11: 0000000000000246 R12: 0000000000000000
[ 2614.871586][T26856] R13: 0000000020000040 R14: 0000000020000100 R15: 00000000200001c0
05:54:37 executing program 5:
mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000100)=0xffffffff80000001, 0x5, 0x1)
mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8)
getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000))
clock_gettime(0xd4e8863c12c8ef23, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))

05:54:37 executing program 2:
clock_gettime(0x0, 0x0)

05:54:37 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x8000, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)

05:54:37 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil)

05:54:37 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000100)={0x1a, 0x0, 0x3, "a0d2f9b35a538564d62ecbcfc4d054874b6a5369b6395034de9c01bffc08e2b8", 0x38415261})
syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x19, 0x2)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000140))
write$nbd(r1, &(0x7f00000001c0)={0x67446698, 0x1, 0x4, 0x3, 0x1, "e675df71d0204b41f6f55ff75cdaecf5926635bd86a2fc0122e130b2a521c2e33db2271e27eaf7961e6998767444ee053c4576ff2dd72e7d722c3ebd112705b6b5b14cd133155e9dc02443db22c56fd5b989cb8c72cb5aafcb04c54a5b474b1a611482994a9907ce5e9ac30eefabbf5cc3c9f13c2825509453c96aef5db469098b5e"}, 0x92)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

[ 2615.229042][ T9847] Bluetooth: hci3: command 0x0401 tx timeout
05:54:37 executing program 1 (fault-call:0 fault-nth:5):
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:37 executing program 5:
mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000100)=0xffffffff80000001, 0x5, 0x1)
mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8)
getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000))
clock_gettime(0xd4e8863c12c8ef23, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))

05:54:37 executing program 2:
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@loopback, @in=@private}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8)
clock_gettime(0xd4e8863c12c8ef23, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000140)=@rc, 0x80, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f00000002c0)=""/235, 0xeb}, {&(0x7f00000003c0)=""/253, 0xfd}, {&(0x7f00000004c0)=""/98, 0x62}, {&(0x7f0000000540)=""/97, 0x61}, {&(0x7f00000005c0)=""/142, 0x8e}], 0x6, &(0x7f0000000700)=""/115, 0x73}, 0x1)

05:54:37 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x80, 0x1, 0xff, 0x242, 0x1, 0x400, [], 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x40)
r0 = gettid()
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0xe0002, 0x0)
ioctl$CAPI_GET_FLAGS(r1, 0x80044323, &(0x7f0000000140))
r2 = getpgrp(r0)
move_pages(r2, 0x2, &(0x7f0000000040)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000080)=[0x7f, 0x4, 0x3f], &(0x7f00000000c0)=[0x0], 0x0)
gettid()
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000180)=0x6, 0x8)
move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x6)

05:54:37 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
getitimer(0x1, &(0x7f0000000000))

05:54:37 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x0, 0x4, 0x4, 0x10000, 0x8000, {}, {0x1, 0xc, 0x1, 0x7f, 0x2, 0x5, "23398dba"}, 0x6, 0x3, @offset=0x9})
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:38 executing program 5:
mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000100)=0xffffffff80000001, 0x5, 0x1)
mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8)
getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000))
clock_gettime(0xd4e8863c12c8ef23, 0x0)

05:54:38 executing program 4:
socket(0x7, 0x3, 0x7)
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x200, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040))

[ 2615.541805][T26905] FAULT_INJECTION: forcing a failure.
[ 2615.541805][T26905] name failslab, interval 1, probability 0, space 0, times 0
05:54:38 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)

05:54:38 executing program 2:
r0 = userfaultfd(0x80800)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
clock_gettime(0x7, &(0x7f0000000140))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00'})
ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)={0x6, 0xa, 0x4, 0xe000, 0x80, {0x0, 0xea60}, {0x2, 0xb, 0xff, 0x8, 0x1f, 0x3, 'j\n\"\a'}, 0x6, 0x0, @fd})
r3 = socket(0x1, 0x2, 0x200)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001600)={{{@in6=@ipv4={[], [], @broadcast}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@local}}}, &(0x7f0000001700)=0xe8)
sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000001800)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x64, 0x0, 0x2, 0xfffffff7, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x84}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008000}, 0x800)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x2000})
clock_gettime(0xd4e8863c12c8ef23, 0x0)

05:54:38 executing program 0:
socket$inet6(0xa, 0x3, 0x20d)

[ 2615.659350][T26905] CPU: 1 PID: 26905 Comm: syz-executor.1 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2615.669047][T26905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2615.679139][T26905] Call Trace:
[ 2615.682436][T26905]  dump_stack+0x107/0x163
[ 2615.686791][T26905]  should_fail.cold+0x5/0x1f
[ 2615.691413][T26905]  ? __alloc_file+0x21/0x280
[ 2615.696034][T26905]  ? __alloc_file+0x21/0x280
[ 2615.700671][T26905]  should_failslab+0x5/0x10
05:54:38 executing program 4:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x492240, 0x0)
ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f0000000200)=0xffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f00000000c0)={0x2, &(0x7f0000000040)="9d68ea65e357a678f4c572eceeff76085de45cab30fef8ac62f97516a66a989ba30430cbe55315d79e64946619c9e7e2a10b88eee0df5c69b8b730aaacc9ca6e6b46ba46152c4192905c8a1c977bca8ac7"})
clock_gettime(0xd4e8863c0000000b, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x424840, 0x0)
msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000180)=""/125)

[ 2615.705206][T26905]  kmem_cache_alloc+0x5e/0x380
[ 2615.710002][T26905]  __alloc_file+0x21/0x280
[ 2615.714451][T26905]  alloc_empty_file+0x6d/0x170
[ 2615.719242][T26905]  alloc_file+0x93/0x5d0
[ 2615.723518][T26905]  alloc_file_pseudo+0x165/0x250
[ 2615.728492][T26905]  ? alloc_file+0x5d0/0x5d0
[ 2615.733027][T26905]  ? shmem_get_inode+0x593/0xc30
[ 2615.737996][T26905]  __shmem_file_setup+0x144/0x310
[ 2615.743044][T26905]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 2615.749320][T26905]  __do_sys_memfd_create+0x26b/0x5a0
[ 2615.754639][T26905]  ? hmm_vma_walk_hugetlb_entry+0x8a0/0x8a0
[ 2615.760559][T26905]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2615.766481][T26905]  do_syscall_64+0x2d/0x70
[ 2615.770933][T26905]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2615.776856][T26905] RIP: 0033:0x45e149
[ 2615.780768][T26905] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2615.800406][T26905] RSP: 002b:00007f4bcc935a18 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2615.808874][T26905] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045e149
[ 2615.816891][T26905] RDX: 00007f4bcc935ad0 RSI: 0000000000000000 RDI: 00000000004c2bc7
[ 2615.824907][T26905] RBP: 0000000000000000 R08: 00007f4bcc935ac8 R09: 0000000000000000
[ 2615.832911][T26905] R10: 00007f4bcc935acc R11: 0000000000000246 R12: 0000000000000000
[ 2615.840890][T26905] R13: 0000000020000040 R14: 0000000020000100 R15: 00000000200001c0
05:54:38 executing program 1 (fault-call:0 fault-nth:6):
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:38 executing program 5:
mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000100)=0xffffffff80000001, 0x5, 0x1)
mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8)
getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000))

05:54:38 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)

05:54:38 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x8a41, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
clock_gettime(0xd4e8863c0000000b, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00@', @ANYRES16=0x0, @ANYBLOB="20002abd7000fbdbdf250a00000005002a00010000000a000900ffffffffffff0000050037000000000008003a00010000000500330001000000050033000000000005002a00010000000a000900ffffffffffff000008003a00010000000800390009000000"], 0x6c}}, 0x4c004)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000300)='/dev/video#\x00', 0x6, 0x2)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000240))
write$tcp_mem(r2, &(0x7f0000000040)={0x3, 0x20, 0x8, 0x20, 0x9}, 0x48)
r4 = userfaultfd(0x80800)
ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000fec000/0x14000)=nil, 0x14000})
ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x3)

05:54:38 executing program 3:
r0 = getpgrp(0xffffffffffffffff)
wait4(r0, 0x0, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x80102, 0x0)
sync()
move_pages(r0, 0x61, 0x0, 0x0, 0x0, 0x0)
tgkill(r0, r0, 0x0)

05:54:38 executing program 2:
clock_gettime(0x4, 0x0)

05:54:39 executing program 5:
mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000100)=0xffffffff80000001, 0x5, 0x1)
mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8)
getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

[ 2616.443062][T26943] FAULT_INJECTION: forcing a failure.
[ 2616.443062][T26943] name failslab, interval 1, probability 0, space 0, times 0
05:54:39 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}}, 0x1)
socket$inet(0x2, 0x80000, 0x7ff)

05:54:39 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card2/oss_mixer\x00', 0x32802, 0x0)
syz_io_uring_setup(0x106b, &(0x7f0000000280)={0x0, 0xf0bb, 0x20, 0x3, 0x29e}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340))
syz_io_uring_setup(0x601d, &(0x7f0000000380)={0x0, 0xfb19, 0x3c, 0x3, 0x280}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)=<r0=>0x0)
syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x8001)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000240)=0x8000, 0x6, 0x6)
pselect6(0x40, &(0x7f0000000040)={0x24, 0x1, 0x40, 0x0, 0x2, 0x8, 0x8, 0x9}, &(0x7f0000000080)={0x38, 0xfffffffffffffffe, 0xf3, 0x8, 0x6, 0xfffffffffffffff8, 0x2, 0xfffffffffffffff7}, &(0x7f00000000c0)={0x3554171, 0x6, 0x9, 0x7, 0x8, 0xff, 0x7, 0xfffffffffffffffe}, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000140)={[0x2]}, 0x8})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00'})

[ 2616.494951][T26943] CPU: 1 PID: 26943 Comm: syz-executor.1 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2616.504650][T26943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2616.514740][T26943] Call Trace:
[ 2616.518038][T26943]  dump_stack+0x107/0x163
[ 2616.522406][T26943]  should_fail.cold+0x5/0x1f
[ 2616.527021][T26943]  ? security_file_alloc+0x34/0x170
[ 2616.532252][T26943]  ? security_file_alloc+0x34/0x170
[ 2616.537492][T26943]  should_failslab+0x5/0x10
[ 2616.542025][T26943]  kmem_cache_alloc+0x5e/0x380
[ 2616.546819][T26943]  security_file_alloc+0x34/0x170
[ 2616.551958][T26943]  __alloc_file+0xd8/0x280
[ 2616.556435][T26943]  alloc_empty_file+0x6d/0x170
[ 2616.561229][T26943]  alloc_file+0x93/0x5d0
[ 2616.565506][T26943]  alloc_file_pseudo+0x165/0x250
[ 2616.570475][T26943]  ? alloc_file+0x5d0/0x5d0
[ 2616.575013][T26943]  ? shmem_get_inode+0x593/0xc30
[ 2616.579983][T26943]  __shmem_file_setup+0x144/0x310
[ 2616.585033][T26943]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 2616.591310][T26943]  __do_sys_memfd_create+0x26b/0x5a0
[ 2616.596627][T26943]  ? hmm_vma_walk_hugetlb_entry+0x8a0/0x8a0
[ 2616.602572][T26943]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2616.608514][T26943]  do_syscall_64+0x2d/0x70
[ 2616.612967][T26943]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2616.618934][T26943] RIP: 0033:0x45e149
[ 2616.622861][T26943] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
05:54:39 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000800)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000840)=0x10)

[ 2616.642496][T26943] RSP: 002b:00007f4bcc935a18 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2616.651064][T26943] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045e149
[ 2616.659070][T26943] RDX: 00007f4bcc935ad0 RSI: 0000000000000000 RDI: 00000000004c2bc7
[ 2616.667063][T26943] RBP: 0000000000000000 R08: 00007f4bcc935ac8 R09: 0000000000000000
[ 2616.675059][T26943] R10: 00007f4bcc935acc R11: 0000000000000246 R12: 0000000000000000
[ 2616.683053][T26943] R13: 0000000020000040 R14: 0000000020000100 R15: 00000000200001c0
05:54:39 executing program 3:
syz_io_uring_setup(0x3739, &(0x7f0000000000)={0x0, 0x5772, 0x8, 0x3, 0x12}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
ioprio_set$pid(0x1, 0xffffffffffffffff, 0x4004)

05:54:39 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48400, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000100))
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0x1f, 0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4c001)
clock_gettime(0x1, 0x0)

05:54:39 executing program 1 (fault-call:0 fault-nth:7):
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:39 executing program 2:
clock_gettime(0x2, 0x0)
clock_gettime(0x3, &(0x7f0000000140))
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x14)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x103100, 0x0)
ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x80, 0x0, 0x4, 0x8, 0x0, {0x0, 0x2710}, {0x3, 0x8, 0x7, 0xb7, 0x6, 0x20, "10c6c746"}, 0x7ffffffe, 0x4, @userptr=0x7, 0x38e8, 0x0, r1})
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
ioctl$NBD_CLEAR_QUE(r1, 0xab05)

05:54:39 executing program 5:
mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000100)=0xffffffff80000001, 0x5, 0x1)
mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8)

05:54:39 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
msgget(0x0, 0x100)
clock_settime(0x1, &(0x7f0000000000))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x6, 0x6, &(0x7f00000000c0)=0x9})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00'})

05:54:39 executing program 3:
r0 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x80, 0x46, 0xff, 0x0, {{0x10, 0x4, 0x1, 0x3, 0x40, 0x64, 0x0, 0x2, 0x4, 0x0, @multicast2, @remote, {[@timestamp_addr={0x44, 0xc, 0x54, 0x1, 0x1, [{@broadcast, 0x3}]}, @timestamp={0x44, 0x10, 0x56, 0x0, 0x4, [0xb1, 0x0, 0xfffffff7]}, @noop, @ssrr={0x89, 0xf, 0xe0, [@broadcast, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x37}]}]}}}}})

05:54:39 executing program 4:
clock_gettime(0x0, 0x0)
clock_gettime(0x4, &(0x7f0000000000))

05:54:39 executing program 5:
mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8)

05:54:39 executing program 0:
socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000))

05:54:39 executing program 2:
ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04)
clock_gettime(0xd4e8863c12c8ef23, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x3, 0x2, 0x9, 0x5, 0x4, 0x7, 0xfff, 0x3000000000000}, &(0x7f0000000040)={0xffffffffffffff81, 0x7fff, 0x4, 0x2, 0x5, 0x5, 0xb5f, 0x8000}, &(0x7f0000000080)={0x9a9, 0x100000000, 0x4, 0x3, 0x0, 0x2, 0xdb0, 0x80}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x2]}, 0x8})
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x400, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x9, 0xb, 0x4, 0x800, 0x40000, {}, {0x2, 0xc, 0x3, 0x0, 0x40, 0x3, "2af05caf"}, 0x6, 0x1, @offset=0x7, 0x7fffffff, 0x0, r0})

[ 2617.309075][T16619] Bluetooth: hci3: command 0x0401 tx timeout
[ 2617.337863][T26987] FAULT_INJECTION: forcing a failure.
[ 2617.337863][T26987] name failslab, interval 1, probability 0, space 0, times 0
05:54:39 executing program 4:
clock_gettime(0x1, 0x0)

05:54:39 executing program 3:
r0 = getpgrp(0xffffffffffffffff)
set_tid_address(&(0x7f0000000000))
wait4(r0, 0x0, 0x40000000, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffc01, 0x101100)
msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000))
move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x4)

[ 2617.420281][T26987] CPU: 0 PID: 26987 Comm: syz-executor.1 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2617.429973][T26987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2617.440052][T26987] Call Trace:
[ 2617.443345][T26987]  dump_stack+0x107/0x163
[ 2617.447703][T26987]  should_fail.cold+0x5/0x1f
[ 2617.452331][T26987]  ? tomoyo_realpath_from_path+0xc3/0x620
[ 2617.458074][T26987]  should_failslab+0x5/0x10
[ 2617.462607][T26987]  __kmalloc+0x72/0x310
[ 2617.466783][T26987]  ? slab_free_freelist_hook+0x82/0x1d0
[ 2617.472378][T26987]  tomoyo_realpath_from_path+0xc3/0x620
[ 2617.477942][T26987]  ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 2617.484215][T26987]  tomoyo_path_perm+0x21b/0x3f0
[ 2617.489088][T26987]  ? tomoyo_path_perm+0x1c1/0x3f0
[ 2617.494156][T26987]  ? tomoyo_check_open_permission+0x380/0x380
[ 2617.500272][T26987]  ? find_held_lock+0x2d/0x110
[ 2617.505107][T26987]  security_path_truncate+0xcf/0x140
[ 2617.510429][T26987]  do_sys_ftruncate+0x553/0x890
[ 2617.515309][T26987]  do_syscall_64+0x2d/0x70
05:54:40 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)=0x3)

[ 2617.519751][T26987]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2617.525664][T26987] RIP: 0033:0x45e117
[ 2617.529575][T26987] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 dc e4 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2617.549224][T26987] RSP: 002b:00007f4bcc935a18 EFLAGS: 00000217 ORIG_RAX: 000000000000004d
[ 2617.557663][T26987] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045e117
[ 2617.565654][T26987] RDX: 00007f4bcc935ad0 RSI: 0000000000000000 RDI: 0000000000000004
[ 2617.573659][T26987] RBP: 0000000000000000 R08: 00007f4bcc935ac8 R09: 0000000000000000
[ 2617.581767][T26987] R10: 00007f4bcc935acc R11: 0000000000000217 R12: 0000000000000000
[ 2617.589749][T26987] R13: 0000000000000004 R14: 0000000000000004 R15: 00000000200001c0
[ 2617.754616][T26987] ERROR: Out of memory at tomoyo_realpath_from_path.
05:54:40 executing program 1 (fault-call:0 fault-nth:8):
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:40 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x1, 0x0)
write$proc_mixer(r2, &(0x7f0000000100), 0x0)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:40 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4)
mmap$snddsp_control(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x1000004, 0x30, 0xffffffffffffffff, 0x83000000)
gettid()
setresuid(0xee00, 0xee00, 0xee01)

05:54:40 executing program 5:
mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8)

05:54:40 executing program 2:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x81, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in6=@private1}, 0x0, @in6=@remote}}, &(0x7f0000000840)=0xe8)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d00)={&(0x7f0000000880)={0x444, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x200}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x444}, 0x1, 0x0, 0x0, 0x4008004}, 0x400c800)

05:54:40 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
write$capi20(r0, &(0x7f0000000000)={0x10, 0x2054, 0x80, 0x82, 0x2, 0x5}, 0x10)
clock_gettime(0xd4e8863c0000000b, 0x0)

05:54:40 executing program 3:
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x2)

05:54:40 executing program 5:
mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8)

05:54:40 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)

05:54:40 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
clock_gettime(0x1, &(0x7f0000000280))
clock_getres(0x1, &(0x7f0000000240))
pselect6(0x40, &(0x7f0000000040)={0x100000001, 0xfffffffffffffff8, 0x6, 0x2, 0x4, 0x9, 0xffffffff, 0x10001}, &(0x7f0000000080)={0x3ff, 0x0, 0x1, 0x3, 0x3, 0x81, 0x3, 0x5}, &(0x7f00000000c0)={0xc2bd, 0x200, 0x101, 0x81, 0x9, 0x6, 0x7, 0x10000}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x80000001]}, 0x8})
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000300)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
getitimer(0x0, &(0x7f0000000200))
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x1ff, 0x58881)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00'})

[ 2618.027191][T27024] FAULT_INJECTION: forcing a failure.
[ 2618.027191][T27024] name failslab, interval 1, probability 0, space 0, times 0
[ 2618.054811][T27024] CPU: 0 PID: 27024 Comm: syz-executor.1 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2618.064536][T27024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
05:54:40 executing program 0:
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000000)=0x8000, 0x4)
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, @vsock={0x28, 0x0, 0x0, @my=0x0}, @tipc=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x0, 0x4}}, @phonet={0x23, 0x80, 0x47, 0x7f}, 0x1, 0x0, 0x0, 0x0, 0xca3, 0x0, 0x3f, 0x20, 0x7ff})
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
connect$vsock_stream(r1, &(0x7f0000000100), 0x10)

[ 2618.074629][T27024] Call Trace:
[ 2618.077931][T27024]  dump_stack+0x107/0x163
[ 2618.082304][T27024]  should_fail.cold+0x5/0x1f
[ 2618.086933][T27024]  ? tomoyo_encode2.part.0+0xe9/0x3a0
[ 2618.092323][T27024]  should_failslab+0x5/0x10
[ 2618.096852][T27024]  __kmalloc+0x72/0x310
[ 2618.101036][T27024]  tomoyo_encode2.part.0+0xe9/0x3a0
[ 2618.106263][T27024]  tomoyo_encode+0x28/0x50
[ 2618.110701][T27024]  tomoyo_realpath_from_path+0x186/0x620
[ 2618.116369][T27024]  tomoyo_path_perm+0x21b/0x3f0
[ 2618.121258][T27024]  ? tomoyo_path_perm+0x1c1/0x3f0
[ 2618.126315][T27024]  ? tomoyo_check_open_permission+0x380/0x380
[ 2618.132431][T27024]  ? find_held_lock+0x2d/0x110
[ 2618.137260][T27024]  security_path_truncate+0xcf/0x140
[ 2618.142601][T27024]  do_sys_ftruncate+0x553/0x890
[ 2618.147484][T27024]  do_syscall_64+0x2d/0x70
[ 2618.151933][T27024]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2618.157858][T27024] RIP: 0033:0x45e117
[ 2618.161777][T27024] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 dc e4 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2618.181414][T27024] RSP: 002b:00007f4bcc935a18 EFLAGS: 00000217 ORIG_RAX: 000000000000004d
[ 2618.189861][T27024] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 000000000045e117
[ 2618.197870][T27024] RDX: 00007f4bcc935ad0 RSI: 0000000000000000 RDI: 0000000000000004
[ 2618.205863][T27024] RBP: 0000000000000000 R08: 00007f4bcc935ac8 R09: 0000000000000000
[ 2618.213852][T27024] R10: 00007f4bcc935acc R11: 0000000000000217 R12: 0000000000000000
[ 2618.221846][T27024] R13: 0000000000000004 R14: 0000000000000004 R15: 00000000200001c0
05:54:40 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)
getpgrp(0xffffffffffffffff)
r0 = getpgrp(0xffffffffffffffff)
wait4(r0, 0x0, 0x0, 0x0)
move_pages(r0, 0x4, &(0x7f0000000000)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000080)=[0x0], 0x4)
clock_getres(0x5, &(0x7f0000000040))

[ 2618.433211][T27024] ERROR: Out of memory at tomoyo_realpath_from_path.
05:54:41 executing program 0:
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x3, 0x5, "801cd1", 0x1, 0x1})
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
msgget(0x0, 0x4)
r1 = msgget(0x0, 0x200)
msgctl$IPC_RMID(r1, 0x0)
msgsnd(r1, &(0x7f00000000c0)={0x3, "8632922d5c3eba358755b575dc8ad019583e66237bfa386bf278707588bb8e6f89710771554f5ca0bd50dfa9d699f9dac00a270db569e04dbf8e4c3ef596b88c0e51df3e37fb7618c1d35c1577ca9d11cfb6eb7e7e55b936ad100727fe0d817ef138d0f410acff634bbffbee4742917c97919ee1a8582babea27e4121baf4407d2017c0b15201227889531121d2d87c65e67df8f53de8da739d9e444a30d497f2e277ea18e7b8249050732e85965967813f5f4324630e46a4b97f97a4dbd7691472bd48a32b23e8d22a9a92ff832482dc270f91e42759e0a84b2bb52d1819e766c0fab3b8c59abc0830fe7f8ddec"}, 0xf6, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000})

05:54:41 executing program 5:
mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000100)=0xffffffff80000001, 0x5, 0x1)
mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8)

05:54:41 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
set_tid_address(&(0x7f0000000000))

05:54:41 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
userfaultfd(0x80000)
msgget(0x0, 0x2)

05:54:41 executing program 4:
syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x7ee72030, 0x2)
clock_gettime(0xd4e8863c0000000b, 0x0)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000))

05:54:41 executing program 1 (fault-call:0 fault-nth:9):
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:41 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffa000/0x3000)=nil, 0x3000})
ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000000))
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

05:54:41 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x9, 0xfffffffffffffffd, 0xb4, 0xd9, 0xffffffff, 0xf5c8, 0x3, 0x9}, &(0x7f0000000040)={0xccb, 0x100000001, 0xfff, 0x5ded, 0x2, 0x9, 0xaa0, 0x3ff}, &(0x7f0000000080)={0x400, 0x401, 0x142, 0x900, 0x20, 0x5, 0x8000, 0x7}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100), 0x8})

05:54:41 executing program 5:
mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000100)=0xffffffff80000001, 0x5, 0x1)
mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8)

05:54:41 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x4000c0, 0x0)
ioctl$NBD_SET_SIZE(r0, 0xab02, 0x1f)
timer_create(0x4, &(0x7f0000000040)={0x0, 0x39, 0x4, @thr={&(0x7f0000000000)="c4db0d15c9f1e2f74d60a3d63677606277a7885a55", &(0x7f00000000c0)="393aa6031472b6a038d0d76f893bdb767006bd728aed3b091a913f268792196a1f5b31a823e6aabf5c9e2ab6d24cb555623be135c04900685d70f8e7d9d2209f7d7db4cf"}}, &(0x7f0000000140)=<r1=>0x0)
timer_gettime(r1, &(0x7f0000000180))
r2 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:41 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
gettid()
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x135, 0x4, 0x0, 0xfff, 0x1, 0x8, 0x2, 0xc81}, &(0x7f0000000040)={0x40, 0x3, 0x80000001, 0x3a, 0x240000, 0xfa, 0x2, 0x4}, &(0x7f0000000080)={0x2, 0x1ff, 0x5, 0x0, 0x9, 0x0, 0x7, 0x3}, &(0x7f0000000300)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x2]}, 0x8})
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000200)={0x1, @vbi={0x9, 0x392, 0x9, 0x34324d59, [0x4, 0xfffffff7], [0x34f, 0x6], 0x2}})
openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dri/renderD128\x00', 0x48001, 0x0)

[ 2618.787052][T27061] FAULT_INJECTION: forcing a failure.
[ 2618.787052][T27061] name failslab, interval 1, probability 0, space 0, times 0
[ 2618.848123][T27061] CPU: 0 PID: 27061 Comm: syz-executor.1 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2618.857820][T27061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2618.867902][T27061] Call Trace:
[ 2618.871197][T27061]  dump_stack+0x107/0x163
[ 2618.875558][T27061]  should_fail.cold+0x5/0x1f
[ 2618.880176][T27061]  ? getname_flags.part.0+0x50/0x4f0
[ 2618.885488][T27061]  ? getname_flags.part.0+0x50/0x4f0
[ 2618.890793][T27061]  should_failslab+0x5/0x10
[ 2618.895321][T27061]  kmem_cache_alloc+0x5e/0x380
[ 2618.900113][T27061]  getname_flags.part.0+0x50/0x4f0
[ 2618.905255][T27061]  getname+0x8e/0xd0
[ 2618.909179][T27061]  do_sys_openat2+0xf5/0x420
[ 2618.913791][T27061]  ? build_open_flags+0x680/0x680
[ 2618.918841][T27061]  ? do_syscall_64+0x2d/0x70
[ 2618.923457][T27061]  ? lock_downgrade+0x6d0/0x6d0
[ 2618.928337][T27061]  __x64_sys_open+0x119/0x1c0
[ 2618.933148][T27061]  ? do_sys_open+0x140/0x140
[ 2618.937763][T27061]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2618.943704][T27061]  do_syscall_64+0x2d/0x70
[ 2618.948171][T27061]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2618.954093][T27061] RIP: 0033:0x417c41
[ 2618.958005][T27061] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 6a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01
[ 2618.977644][T27061] RSP: 002b:00007f4bcc935a10 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[ 2618.986086][T27061] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000417c41
05:54:41 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$NBD_SET_SIZE(r0, 0xab02, 0x1)
clock_gettime(0xd4e8863c12c8ef23, 0x0)

[ 2618.994081][T27061] RDX: 00007f4bcc935ad0 RSI: 0000000000000002 RDI: 00007f4bcc935ad0
[ 2619.002076][T27061] RBP: 0000000000000000 R08: 00007f4bcc935ac8 R09: 0000000000000000
[ 2619.010070][T27061] R10: 00007f4bcc935acc R11: 0000000000000293 R12: 0000000000000000
[ 2619.018067][T27061] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000110
05:54:41 executing program 1 (fault-call:0 fault-nth:10):
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:41 executing program 5:
mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000100)=0xffffffff80000001, 0x5, 0x1)
mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8)

05:54:41 executing program 3:
r0 = getpgrp(0xffffffffffffffff)
r1 = getpgrp(r0)
move_pages(r1, 0x0, 0x0, 0x0, 0x0, 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x48800, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x200000, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x50103, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r5 = getpgrp(0xffffffffffffffff)
wait4(r5, 0x0, 0x0, 0x0)
ptrace(0x4207, r5)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)={{0x0, 0x5, 0x7ff, 0x401, 0x1, 0x3000000000, 0x100, 0x0, 0x200, 0x2, 0x1, 0x1, 0x1f, 0x100, 0x6}, 0x8, [0x0]})
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x800, 0x0)

05:54:41 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0xaa, 0x2)

05:54:41 executing program 4:
clock_gettime(0x4, 0x0)
sync()
syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x32, 0x2)

05:54:41 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
syz_io_uring_setup(0x2d20, &(0x7f0000000000)={0x0, 0xfda5, 0x8, 0x3, 0x33e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

[ 2619.398779][T31771] Bluetooth: hci3: command 0x0401 tx timeout
05:54:42 executing program 5:
mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x0, 0x5, 0x1)
mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8)

05:54:42 executing program 4:
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xc)
r0 = gettid()
getpgrp(r0)
getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080))
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@private2, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8)
tgkill(r0, 0x0, 0xd)

05:54:42 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
clock_gettime(0x0, &(0x7f0000000280)={<r1=>0x0, <r2=>0x0})
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f0000000300)=0x10)
pselect6(0x40, &(0x7f0000000100)={0x5, 0x80, 0x9, 0x3, 0x2a75, 0xe79, 0x6e06de95, 0xfffffffffffffffa}, &(0x7f0000000140)={0x1, 0x5, 0x802, 0xfff, 0x9, 0x9, 0x400000007f, 0x80000000}, &(0x7f0000000180)={0xcd5d, 0x0, 0x9, 0x9, 0x10000, 0x3, 0x4e29, 0xa}, &(0x7f00000001c0)={r1, r2+60000000}, &(0x7f0000000240)={&(0x7f0000000200)={[0x833]}, 0x8})
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000340)={0x0, r3}, 0x10)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000001540)=""/220)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x141001, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001640)=""/69, 0x45}, {&(0x7f00000016c0)=""/177, 0xb1}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x3, &(0x7f0000001400)=""/239, 0xef}, 0x10000)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r5, 0x80685600, &(0x7f0000000080))
getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000001780)={{{@in=@multicast1, @in6=@remote}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000380)=0xe8)

[ 2619.525296][T27101] FAULT_INJECTION: forcing a failure.
[ 2619.525296][T27101] name fail_usercopy, interval 1, probability 0, space 0, times 0
05:54:42 executing program 0:
rt_sigprocmask(0x0, &(0x7f0000000000)={[0x8]}, &(0x7f0000000040), 0x8)
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:42 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
sync()
ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)=0x2)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00')

[ 2619.620938][T27101] CPU: 0 PID: 27101 Comm: syz-executor.1 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2619.630638][T27101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2619.640709][T27101] Call Trace:
[ 2619.644005][T27101]  dump_stack+0x107/0x163
[ 2619.648364][T27101]  should_fail.cold+0x5/0x1f
[ 2619.653027][T27101]  strncpy_from_user+0x34/0x3e0
[ 2619.657910][T27101]  getname_flags.part.0+0x95/0x4f0
[ 2619.663055][T27101]  getname+0x8e/0xd0
[ 2619.666973][T27101]  do_sys_openat2+0xf5/0x420
[ 2619.671591][T27101]  ? build_open_flags+0x680/0x680
[ 2619.676631][T27101]  ? do_syscall_64+0x2d/0x70
[ 2619.681239][T27101]  ? lock_downgrade+0x6d0/0x6d0
[ 2619.686094][T27101]  __x64_sys_open+0x119/0x1c0
[ 2619.690766][T27101]  ? do_sys_open+0x140/0x140
[ 2619.695357][T27101]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2619.701251][T27101]  do_syscall_64+0x2d/0x70
[ 2619.705665][T27101]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2619.711555][T27101] RIP: 0033:0x417c41
[ 2619.715535][T27101] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 6a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01
[ 2619.735143][T27101] RSP: 002b:00007f4bcc935a10 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[ 2619.743555][T27101] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000417c41
[ 2619.751516][T27101] RDX: 00007f4bcc935ad0 RSI: 0000000000000002 RDI: 00007f4bcc935ad0
[ 2619.759474][T27101] RBP: 0000000000000000 R08: 00007f4bcc935ac8 R09: 0000000000000000
[ 2619.767454][T27101] R10: 00007f4bcc935acc R11: 0000000000000293 R12: 0000000000000000
[ 2619.775417][T27101] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000110
05:54:42 executing program 5:
mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x0, 0x5, 0x1)
mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8)

05:54:42 executing program 1 (fault-call:0 fault-nth:11):
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:42 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x5, 0x1)
openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@ipv4, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000500)={0x540, 0x0, 0xa02, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x34, 0x4, [{0x8df2, 0x3f, 0x1f, 0xa200000}, {0x57d7, 0x6, 0x5, 0x4}, {0x5, 0x7f, 0x1, 0xfa0}, {0xb78a, 0x9, 0x9}, {0xd73b, 0x81, 0x5, 0x8}, {0x61d0, 0x3f, 0x4, 0x2}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r4}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8000}, 0x40041)

05:54:42 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
clock_settime(0x0, &(0x7f0000000080))
rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0x20, &(0x7f0000000000)={0xe, 0x10001, 0x6})

05:54:42 executing program 5:
mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x0, 0x5, 0x1)
mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8)

05:54:42 executing program 3:
move_pages(0x0, 0xa9, 0x0, 0x0, 0x0, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x40602, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x10001, 0x4)

[ 2620.135555][T27126] FAULT_INJECTION: forcing a failure.
[ 2620.135555][T27126] name failslab, interval 1, probability 0, space 0, times 0
[ 2620.193450][T27126] CPU: 1 PID: 27126 Comm: syz-executor.1 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2620.203140][T27126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2620.214349][T27126] Call Trace:
[ 2620.217660][T27126]  dump_stack+0x107/0x163
[ 2620.222035][T27126]  should_fail.cold+0x5/0x1f
[ 2620.226654][T27126]  ? __alloc_file+0x21/0x280
[ 2620.231293][T27126]  ? __alloc_file+0x21/0x280
[ 2620.237330][T27126]  should_failslab+0x5/0x10
[ 2620.241860][T27126]  kmem_cache_alloc+0x5e/0x380
[ 2620.246645][T27126]  ? stack_trace_consume_entry+0x160/0x160
[ 2620.252481][T27126]  __alloc_file+0x21/0x280
[ 2620.257020][T27126]  alloc_empty_file+0x6d/0x170
[ 2620.262435][T27126]  path_openat+0x125/0x27a0
[ 2620.267942][T27126]  ? __lock_acquire+0x16c2/0x54b0
[ 2620.273004][T27126]  ? path_lookupat+0x830/0x830
[ 2620.277790][T27126]  ? lockdep_hardirqs_on_prepare+0x420/0x420
[ 2620.283803][T27126]  do_filp_open+0x17e/0x3c0
[ 2620.288331][T27126]  ? may_open_dev+0xf0/0xf0
[ 2620.292866][T27126]  ? alloc_fd+0x2da/0x650
[ 2620.297217][T27126]  ? lock_downgrade+0x6d0/0x6d0
[ 2620.302461][T27126]  ? do_raw_spin_lock+0x120/0x2b0
[ 2620.308736][T27126]  ? rwlock_bug.part.0+0x90/0x90
[ 2620.313936][T27126]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 2620.320202][T27126]  ? _raw_spin_unlock+0x24/0x40
[ 2620.325792][T27126]  ? alloc_fd+0x2da/0x650
[ 2620.330154][T27126]  do_sys_openat2+0x16d/0x420
[ 2620.334866][T27126]  ? build_open_flags+0x680/0x680
[ 2620.339923][T27126]  ? do_syscall_64+0x2d/0x70
[ 2620.345386][T27126]  ? lock_downgrade+0x6d0/0x6d0
[ 2620.350261][T27126]  __x64_sys_open+0x119/0x1c0
[ 2620.354955][T27126]  ? do_sys_open+0x140/0x140
[ 2620.360231][T27126]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2620.366157][T27126]  do_syscall_64+0x2d/0x70
[ 2620.370600][T27126]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2620.376671][T27126] RIP: 0033:0x417c41
[ 2620.380579][T27126] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 6a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01
[ 2620.400217][T27126] RSP: 002b:00007f4bcc935a10 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[ 2620.408682][T27126] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000417c41
[ 2620.416669][T27126] RDX: 00007f4bcc935ad0 RSI: 0000000000000002 RDI: 00007f4bcc935ad0
[ 2620.425638][T27126] RBP: 0000000000000000 R08: 00007f4bcc935ac8 R09: 0000000000000000
[ 2620.433632][T27126] R10: 00007f4bcc935acc R11: 0000000000000293 R12: 0000000000000000
05:54:42 executing program 5:
mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000100), 0x5, 0x1)
mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8)

05:54:42 executing program 5:
mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000100), 0x5, 0x1)
mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8)

05:54:42 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
syz_io_uring_setup(0x1eea, &(0x7f0000000000)={0x0, 0x791, 0x1, 0x0, 0x1f6}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=<r1=>0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@loopback, @in=@loopback}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000780)=0xe8)
syz_io_uring_submit(0x0, r1, &(0x7f0000000640)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=@in6={0xa, 0x4e20, 0x8001, @private1={0xfc, 0x1, [], 0x1}, 0x7}, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)="e45a27117c5377881eb09a7446ee33560c7733dff5a7441c04ab9e73ac2031950dc3b84b48b22d734ff545c70c6e3a382c6db5e5f2258f203f60a32850fb938ff16e9afa2c3bb815643328d32ac4a27bdcc8b726c25802778b3733fea29654970f412e2a158d537147fe77ad02244932452283e4407543313eef7eb1515a7ef73da966f3c7ecf8f9267da17406b00879cefd93dc0b6b49fc04ed", 0x9a}, {&(0x7f0000000280)="d0105b979d7d849df36758128a39a0496ced3b8e802df112a8090cc2ca3ef2269756bb06bd23d4f61069ad39b3e819733aae25e81ab65c2111390473fd43fc4f2006a332ee88f2b3ab82d7f22927706dce34b487d68a7202", 0x58}], 0x2, &(0x7f0000000340)=[{0x100, 0x103, 0x1, "8df4be9ac1c803acb47178d438e86ac3e24f1b0a4cc778bf46a478f5a6308350c63aec0e5346e822f07bca1955d257b8749d32c21f3213ff1111a1aebdbfe51cb774579b01d00f1e42e7d249b547a51fa8a327d9ecc0a271426714b1dfd1aa1d48d5b835d1ceb72f54970cd49274a21c6ed5a483b32ee8c7d1078b06e5f9923ab2280500589bbfd57a7a9be3e575c6fe1842417ad42bfa0e7ac969caec77d305178a17798d6873b37dffcb12e1cc3f8ec041d61f60a2afcbc3ebbf3ee50695a62006bb73914d6e71391d0f50de3bd8bc94a126c357c7ce52b160529de4eecf35d1ea3833075906632df4af0ca5720e"}, {0xd0, 0x29, 0xf9, "93cb66b7ba000b0499ef7bf61b31f7f0ae3f27865b3a0cb92d065e427ce90fcec831bab6577bce747d74210cd0663654a8c64aa6add81dfcfe1ee3fd6c237ed0e43a1a451709514276218ec95b774a1706108ed09f8aa823471049cab351260694e499a2cc3125f69f610b713de688554708ec49ddfd3e7cfd52d57955a200b73d69a0385b68b787d1f602232d8fdd75c63e1266481fa44d942197fb63fdcb752e73d7e460f8457ef98f385f22e2a58d0c46c9408b2bd9e319f019"}, {0xe8, 0x3a, 0x81, "ce2991a7a12679c60f08702b29198b607bffa4cf3cec238a788e481ce53fb05b8d1ebd7e4570c6b7105b17b3ec6312dc5582300b47ded386c4bf683c0f8b26513b644c39aeb2c4be9ca8cf5ae7e4ac13b40da5b245340e578e476a45e5aa2f301d23db40112b965d4a7ded1ad56cb39ce0ae81e71f4fccb6565a4cf9392fa08cc87fd5100d25dd914c0498c1f0cf890c344ace556d4f358d26f73ebc7e5d944842e40f14f57f24cafa3f7d4f5c841b4c304366dacab7e15e7efb788b3c0f18e94dd0433bf869d16d190d10c158acf89b79a7040a0135"}], 0x2b8}, 0x0, 0x40000, 0x1}, 0x7ff)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

[ 2620.441624][T27126] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000110
05:54:43 executing program 2:
clock_gettime(0x2, 0x0)

05:54:43 executing program 4:
clock_gettime(0x4, 0x0)

05:54:43 executing program 5:
mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000100), 0x5, 0x1)
mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8)

05:54:43 executing program 3:
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffff9c, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes128, 0x4, [], @c='\x1c-gT\xb6\xcc}\xaa\xcbY\x98u\xd7\xfa\xf9\xbb'})
move_pages(0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0)

05:54:43 executing program 1 (fault-call:0 fault-nth:12):
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:43 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4c)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

[ 2620.781791][T27155] FAULT_INJECTION: forcing a failure.
[ 2620.781791][T27155] name failslab, interval 1, probability 0, space 0, times 0
[ 2620.854231][T27155] CPU: 1 PID: 27155 Comm: syz-executor.1 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2620.863911][T27155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2620.873990][T27155] Call Trace:
[ 2620.877288][T27155]  dump_stack+0x107/0x163
[ 2620.881646][T27155]  should_fail.cold+0x5/0x1f
[ 2620.886265][T27155]  ? security_file_alloc+0x34/0x170
[ 2620.891492][T27155]  ? security_file_alloc+0x34/0x170
[ 2620.896710][T27155]  should_failslab+0x5/0x10
[ 2620.901370][T27155]  kmem_cache_alloc+0x5e/0x380
[ 2620.906155][T27155]  security_file_alloc+0x34/0x170
[ 2620.911204][T27155]  __alloc_file+0xd8/0x280
[ 2620.915650][T27155]  alloc_empty_file+0x6d/0x170
[ 2620.920441][T27155]  path_openat+0x125/0x27a0
[ 2620.924988][T27155]  ? __lock_acquire+0x16c2/0x54b0
[ 2620.930041][T27155]  ? path_lookupat+0x830/0x830
[ 2620.934833][T27155]  ? lockdep_hardirqs_on_prepare+0x420/0x420
[ 2620.940846][T27155]  do_filp_open+0x17e/0x3c0
[ 2620.945361][T27155]  ? may_open_dev+0xf0/0xf0
[ 2620.949889][T27155]  ? alloc_fd+0x2da/0x650
[ 2620.954229][T27155]  ? lock_downgrade+0x6d0/0x6d0
[ 2620.959110][T27155]  ? do_raw_spin_lock+0x120/0x2b0
[ 2620.964164][T27155]  ? rwlock_bug.part.0+0x90/0x90
[ 2620.969119][T27155]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 2620.975397][T27155]  ? _raw_spin_unlock+0x24/0x40
[ 2620.980266][T27155]  ? alloc_fd+0x2da/0x650
[ 2620.984731][T27155]  do_sys_openat2+0x16d/0x420
[ 2620.989433][T27155]  ? build_open_flags+0x680/0x680
[ 2620.994488][T27155]  ? do_syscall_64+0x2d/0x70
[ 2620.999102][T27155]  ? lock_downgrade+0x6d0/0x6d0
[ 2621.003977][T27155]  __x64_sys_open+0x119/0x1c0
[ 2621.008668][T27155]  ? do_sys_open+0x140/0x140
[ 2621.013278][T27155]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2621.019201][T27155]  do_syscall_64+0x2d/0x70
[ 2621.023654][T27155]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2621.029568][T27155] RIP: 0033:0x417c41
[ 2621.033472][T27155] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 6a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01
05:54:43 executing program 4:
clock_gettime(0x0, 0x0)

05:54:43 executing program 2:
setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x400, 0x4)
clock_gettime(0xd4e8863c12c8ef23, 0x0)

[ 2621.053104][T27155] RSP: 002b:00007f4bcc935a10 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[ 2621.061542][T27155] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000417c41
[ 2621.069529][T27155] RDX: 00007f4bcc935ad0 RSI: 0000000000000002 RDI: 00007f4bcc935ad0
[ 2621.077514][T27155] RBP: 0000000000000000 R08: 00007f4bcc935ac8 R09: 0000000000000000
[ 2621.085531][T27155] R10: 00007f4bcc935acc R11: 0000000000000293 R12: 0000000000000000
[ 2621.093517][T27155] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000110
05:54:43 executing program 3:
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)

05:54:43 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@loopback, @in=@private}}, {{@in6=@remote}, 0x0, @in6=@private2}}, &(0x7f0000000040)=0xe8)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:43 executing program 5:
mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000100)=0xffffffff80000001, 0x0, 0x1)
mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8)

05:54:43 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5eb0f4f5"}, 0x0, 0x0, @planes=0x0})
clock_getres(0x0, &(0x7f0000000000))

05:54:43 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_ext={0x1c, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @jmp={0x5, 0x0, 0xc, 0x6, 0x9, 0x50, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x2, &(0x7f0000000080)=""/2, 0x40f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0xd, 0xffff, 0x1}, 0x10, 0x18840}, 0x78)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0}, 0x40)
shmget(0x0, 0x2000, 0x100, &(0x7f0000ffe000/0x2000)=nil)

05:54:43 executing program 0:
syz_io_uring_setup(0x3735, &(0x7f0000000000)={0x0, 0x39d4, 0x4, 0x0, 0x3db}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=<r0=>0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
syz_io_uring_submit(0x0, r0, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x3, 0x0, r1, 0x0, &(0x7f0000000140)="ad183f21b558c41d1f5b", 0xa, 0x80}, 0x7f)
r2 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:43 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x41, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000200))

05:54:43 executing program 5:
mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000100)=0xffffffff80000001, 0x0, 0x1)
mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8)

05:54:44 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:44 executing program 2:
rt_sigqueueinfo(0x0, 0x7, &(0x7f0000000200)={0x33, 0x400, 0x2})
clock_gettime(0x2, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00')
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={0x0, @qipcrtr={0x2a, 0x1, 0xfffffffe}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, @xdp={0x2c, 0x4, <r2=>0x0, 0x5}, 0x8, 0x0, 0x0, 0x0, 0xfffb, &(0x7f0000000540)='veth1_to_batadv\x00', 0x3, 0x3ff, 0x3})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000a00)=ANY=[@ANYBLOB="34120000", @ANYRES16=r1, @ANYBLOB="000329bd7000fcdbdf250c00000005002f0000000001080006009a7822de9d99b67c7874acceb59e5b9e09b3b37615441fceb6e0c84b88f0eab80b6679951455d63afdbd9ed910588b1b40a22a250505d2fd43eac2518b4008c18c77e7d2", @ANYRES32=r2, @ANYBLOB="08003200018000000500330002000000"], 0x34}}, 0x4000)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000280)={0x0, r3}, 0x10)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@empty, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@loopback}, 0x0, @in6=@private2}}, &(0x7f0000000400)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)={0x338, 0x0, 0x234, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x258, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x5657}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r2}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x0, 0xa4, 0x7, 0x3ff}, {0x4, 0x1f, 0x1, 0x9}, {0x3ae0, 0x2, 0xfe, 0x9}, {0x5c, 0x2, 0x20}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x70}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r2}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x338}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000004)
syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00')

05:54:44 executing program 4:
r0 = userfaultfd(0x800)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x3000, 0x1})
clock_gettime(0xd4e8863c0000000b, 0x0)

05:54:44 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e3, &(0x7f0000000080)="0fc94b482763fb0ed2617652d354cf40e9793d6c556a622e48cc3a3201ec9a1b357d991d8ec0fb47a5ddc64a0d3efa8f73bd6f03fecfd0fb6d7b6d028f426d4686946c84d3360ee5c0ab7cb411bdf6a87ce646575cc982b43e4ca92ac3224c2131bf8d4b9b6484be27dfe87ed87e1bd264f16557c5a273c7fa73ab2ce2")
ioprio_set$pid(0x1, 0x0, 0x4004)

05:54:44 executing program 3:
move_pages(0xffffffffffffffff, 0xffffffffffffff70, 0x0, 0x0, 0x0, 0x0)
ioctl$CAPI_SET_FLAGS(0xffffffffffffffff, 0x80044324, &(0x7f0000000100)=0x1)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)

05:54:44 executing program 5:
mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000100)=0xffffffff80000001, 0x0, 0x1)
mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8)

05:54:44 executing program 4:
timer_delete(0x0)
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000040))

05:54:44 executing program 5:
mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000100)=0xffffffff80000001, 0x5, 0x0)
mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8)

05:54:44 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f00000001c0)='/dev/video#\x00', 0x3, 0x2)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000100))
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
write$tcp_mem(r0, &(0x7f0000000040)={0x8, 0x20, 0x8000000000005, 0x20, 0x592}, 0x48)

05:54:44 executing program 2:
mmap$snddsp_control(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x2000000, 0x2010, 0xffffffffffffffff, 0x83000000)

05:54:44 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x12)
openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0x5421, 0x0)
ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f00000000c0)={0x0, 0x87f0, 0x1f, &(0x7f0000000040)=0x5f53})
sysfs$2(0x2, 0x100000, &(0x7f0000000000)=""/50)

05:54:44 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:44 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = socket$inet6(0xa, 0xa, 0x4)
r1 = getpgrp(0xffffffffffffffff)
wait4(r1, 0x0, 0x0, 0x0)
wait4(r1, &(0x7f0000000040), 0x4, &(0x7f0000000080))
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})

05:54:44 executing program 5:
mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000100)=0xffffffff80000001, 0x5, 0x0)
mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0)

05:54:44 executing program 0:
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:44 executing program 3:
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffff9c, 0x800c6613, &(0x7f0000000200)=@v1={0x0, @adiantum, 0x3, @desc3='\xe8\xda\xb9\x924\xbb1.'})
r0 = getpgrp(0xffffffffffffffff)
move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x4)
keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3})
epoll_create1(0x80000)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001880)={'syztnl2\x00', &(0x7f0000000240)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYBLOB="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"]})

05:54:44 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x3, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:44 executing program 4:
ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05)
clock_gettime(0xd4e8863c0000000b, 0x0)

05:54:44 executing program 2:
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', <r0=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', <r1=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@private}}, &(0x7f0000000580)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'team0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'team0\x00', <r4=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d40)={'erspan0\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=<r5=>0x0, @ANYBLOB="00080001000000ff8000000048110060006600004f4d8bfd9b9ad2e129907864010101ac14141e890a8f987e2587a0fcec940d4c98555f6704151e3c9cd25e1f44148d708000000200000fbf0000000400000002440cac419a14143f00000cde070f92e0000002ac14142eac9c52bb7878935207643c46ca11f95e745caba565549f3ed8a55556623238690e9becbc2f5a5eb0a3308245d9244a54d4ea8479ef2222f48094379138ad34a6d826ea4e6f7567f484d1bccfed1dd2501feff412eec381e58fc511c28c939c9cbfbb"]})
r6 = socket(0x10, 0x800, 0x401)
getsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x15, 0x101, 0x0, 0x1, 0x84, 0x1, 0xe66, [], 0x0, r6, 0x2, 0x2}, 0x40)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f00000007c0)={{0x0, 0xa6, 0x100, 0x2, 0x898c, 0x59, 0x5, 0xffff, 0x5, 0x3ff, 0x2, 0x5, 0x6, 0x801d, 0x40}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d80)={{{@in6=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{}, 0x0, @in6}}, &(0x7f0000000e80)=0xe8)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80008000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="dc020000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="38010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004008000000008000600", @ANYRES32=r0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=r1, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000200000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c9105000300060000000400040008000600"/60, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="f000028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ff0100003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004001a0e0000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=r8, @ANYBLOB], 0x2dc}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000)
personality(0x4000009)
clock_gettime(0x2, 0x0)
clock_settime(0x4, &(0x7f0000000740)={0x0, 0x3938700})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8)
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f0000000200)=[{&(0x7f0000000080)="5042be91d2afdf3922347ff2fe93aa8007b2b0285575086655d7b5ae8a91b3d03f48367f38d788b3fcf037f3b7c3b52e64c46eadb0f019cbd9d06273949640f9cbe23ce8", 0x44, 0x1ff}, {&(0x7f0000000100)="36832565dc2e5f9a55b0ae6bfe0faababe42b26156bdc92d0d519a3c9100acca1111c79aeefa7def3353e3f88097b967774317ad6bc90824a561a3cc9d87350a946ee1ba719c269448f07252bdbcb7518bf14eec4b65ee2eb3a9359c23c8d64e25a6bc8ef297f52243f681dcaaa99ca3e538b1e8907c5f57bddd352e85af905f2b15a3d9c748f9105c88cc84b312464b57fecab05736929ad5df0c0dd8370d72c56f24fb92efbc5fcbe2deda0278a31a274cf53f137fa5e43c5cd3c31bce3b9770b9c7967b500443f43728fb98dff9175346cfb5a2488ecde14eef70db079f13", 0xe0, 0x8}], 0x10, &(0x7f0000000380)={[{'{\\]'}, {'.'}, {'%%:)(-\'!):\xe0+^'}], [{@uid_eq={'uid', 0x3d, r9}}, {@dont_hash='dont_hash'}]})

05:54:44 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
clock_settime(0x0, &(0x7f0000000080))
rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0x20, &(0x7f0000000000)={0xe, 0x10001, 0x6})

05:54:45 executing program 0:
socket$inet6(0xa, 0x3, 0x9)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180))
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
openat$cgroup_procs(r0, &(0x7f0000000000)='tasks\x00', 0x2, 0x0)

05:54:45 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)

05:54:45 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x20a40, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040))
mmap$snddsp_control(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x1010, r0, 0x83000000)

05:54:45 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000000000))
clock_gettime(0x1, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0x3ff, 0x1000})

05:54:45 executing program 5:
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffff9c, 0x800c6613, &(0x7f0000000200)=@v1={0x0, @adiantum, 0x3, @desc3='\xe8\xda\xb9\x924\xbb1.'})
r0 = getpgrp(0xffffffffffffffff)
move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x4)
keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3})
epoll_create1(0x80000)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001880)={'syztnl2\x00', &(0x7f0000000240)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYBLOB="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"]})

05:54:45 executing program 2:
clock_gettime(0x7, 0x0)
shmget(0x0, 0x1000, 0x1000, &(0x7f0000fff000/0x1000)=nil)
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000000)={0x8, 0x0, 0x3e0, 0x0, 0x3, [0x3, 0x2643, 0x7fffffff, 0x8], [0x20, 0x1, 0x6, 0xa1e], [0x2, 0x6ee, 0x3, 0x1800000], [0x0, 0x4, 0x100000000, 0x5]})
r0 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x422340)
ioctl$NBD_CLEAR_SOCK(r0, 0xab04)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000080))
socket$inet_udp(0x2, 0x2, 0x0)

05:54:45 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:45 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
r2 = syz_open_dev$vim2m(&(0x7f0000000140)='/dev/video#\x00', 0x10001, 0x2)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000180))
syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0xff3, 0x2)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000100)={0x1cfb1008, 0x30324c4a, 0x1, @stepwise={0x3, 0x63, 0xfffffff8, 0x3, 0x10000, 0x1}})

05:54:45 executing program 4:
clock_gettime(0x7, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x4})

05:54:45 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = getpgrp(0xffffffffffffffff)
move_pages(r0, 0x7, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil], &(0x7f0000000040)=[0x7, 0x1], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x2)

05:54:45 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@private, @in=@private}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6=@private0}}, &(0x7f00000001c0)=0xfffffffffffffee0)
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffc1, 0x0, &(0x7f0000000080), 0x14084, &(0x7f00000003c0)={[{')'}, {'!8+)$['}, {'//*-,\'/!\x93\xd2!/]%\xc2**%('}, {'\x00\r\x9a%9\xd5\x01\a\x00\xb5-t\xbb\x8a?\x83}E{W\xa1\x87\xb7'}, {'/[{^.%'}, {':!#'}, {'\\}+-'}, {'//*-,\'/!\x93\xd2!/]%\xc2**%('}, {'&\x84++&#(!'}, {'}@'}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'staff_u'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@context={'context', 0x3d, 'staff_u'}}, {@appraise_type='appraise_type=imasig'}]})
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000002c0))
r2 = getpgrp(0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
getpgrp(r2)

05:54:45 executing program 5:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x3, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:45 executing program 0:
r0 = socket$inet6(0xa, 0x4, 0x29)
msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f000"/4104], 0x1008, 0x1, 0x1000)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:45 executing program 4:
prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x23)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x23456}, 0x6)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)="21896c04d5b0296dcecee43b2301e4", 0xf, 0x48800}, 0x6)

05:54:45 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x5, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:45 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
timer_create(0x7, &(0x7f0000000000)={0x0, 0x30, 0x4, @thr={&(0x7f0000001280)="507b69c0da8a6827570acc8ffde0192be36bbed7604cc0cdc51f42ccacc6f2ebfd1cc078db9d9e623a2d60ff41747d1201a1d7cdef0044edf1224bbbb38a3a104a24523e55a39e069e17501bfe420da50eab43a54dfb63abe30be56a81c09f96d7d16a4d95527773dbebda9e2f3fd88d30748e8d69288d588084149f0c5f85bfbc6c82fece4ac31817c0b5095b3a4e5f7b7277297f093f27ca2c8d4d81788bbf7e5af2db592d4c94a367fc33f0ba0fca5ce8e112dbc767fe5afc51bbad7d8f3e29", &(0x7f0000000180)="5398723c54db6561cf63d80200833aab774c41fe87cf1a9fb2f44073cea23bfb4fbab5d2973f899402e12d045246b01311ea6a74c735df0910d42c6668671bbc1cad1a5960d2efe529112bb9143d02246b6f91be5a5bca8b4160809e631182ca01564bae780e5e6e278e80ac0b1e24f7d11a41ba053d4624530cccb941bea76a7ea91e3c1f77008f74b57e8ebf2b0284676549faf79907b7e3f0e74ef4abe4d52ae8c442b3edd7fae0c4b995747df57707f275e8a8cbececc86de2d224c32fa384b362d69281bd4d325645746ea4585aaea1466edc4a12dfe36558ce47ccc14ada1618916b2711da8807c052c1a5b56a74f1c02183eaca05462553f910c951179b9e031e8c47dec38824cbf51c04fb2ab9db4cd23c9779a329a6fc9ac722ef1607815fa5f76b9a05424d6454819b55a4e1f21bbfdd4312abd99d7e6524084915e716906a8644f893faaa9b81ac9b16bd274b14e1c78df52a634a9d8cbcac0a3a8a498e0486e9e051a884d8a82c793bc14e27177e14dfc6690c39df55b3c34dbf0bfb274ff52cfee791d3630972ee4a0ca0196ff96ac8256f24c076ce0a29ecdc0fcf8ca004c4280598fc1bcabab3824422ebb68a62f6ba83c1d3afb7b135f5d015a554b01508cb2e614580e473fb911fa3c8a153f8de3d70d86c679099c1e2aefd4da8e5862d651122f10a66798a710e453ec2fb9d5092939b289e97232cf24abcec659c0c5e89fa451eb2846d9f56bb3f29f784a2a1e7ea230ee387619f03c9747cf46392f2a0d4dd7806770c3e4b6e2046a82ad184b81c7ecd0de2af7476aed22d87bf27d9760265e867db4e051b24dd4e15ea66d700a5108ae8c584848569569a8768bc2deec48d3b4d9e10f7578186cc4716d4a1899246e9f7a64a68758b7b04faaebe9e73c94b3a3e319c64d75ea97670ef85d4350ebcbe3acc718eaa67baba73d0cc5aad4f814f7a8b0b0c4e584ca18de7fccf506a66189a7edb3d7d839a6d9a2f99c064e111427fbbd6d62cc6ea57605aed5c2c1f3a2dffc1a21b660fc8c205c0cbf86db12656fb26bc9b464a1346489f7e8de548010940ff115d5f9cf70a8076e9744b725754bd131418a3fa3c32d40d67f94a526728f1d6479d42da6fa1ff890660ef19416982522bbaf9b26abbead0ada4d2843936474d44cd88268538d71451e35e40233f20cf8764dfeaa0924f0ba9f1dfbd27b8e177a49f1cb7c3e16ca232449b88c9db7f05ca7fae3e44a26cc4ff36d0186b89d514c0ff0e5e02e6713e816fa7cbe0aa3d78419f0c567e97c4d8f2d0494d66caa0623ae579be753ae0f6347d6730b9573fe767874bd2b2ce9b3a5dc18410991fdb36371546d8a1dba613d1dc21f8ee3ec0c7f817feccabb2ebaf0e5f2a711bf197337f239538c212a65586ec44bef29e3771b0ed27062837bc7089f06892729d250550a8785519a0e74d63a6937d451dd3fab293a28287ae94e36da3f80c46070c6e480ae8b8a091e3ea153328ab97e70c65d2d8bce5a310f5f86743d0c886a8f91c140d68f7ff12a070fd13b6f575441cc1d7b6dcce6447347465e376f968c2d643fb7aaf9cd7052e5c6933eb24dcda3c4f16fb5b5ce1ba650f431a2fbe96ad62e1a4cd4823bb3906feb69f0aae917201e2530b6d2ea4ab1043c2398b2699ed8decedb84ede840656ebb269d2ae35cda5ee685509570c8a2547cd342278baa11cc36bedf0a26d393658684c86124ce6bdeb2d8e97cda4e8f17ab55a6f67e2e5e40b2f6da379d1a560aa4d822875ac5923349756813eaf33012b29bcfb007c2d6ba8005b54e1c09b0788cb363fe9e1ec2831129e01c4f7a788e31cb410f995e09caf3730173def21dd2da3d2850a4fc5c3e24575d0d31000ebd146425262d996a9ae8038e885a8a9d1c1f0d5f4f71e81cfb5b85a587c3e48b21efee35bb8feb543ae1f3752d4d9e4be1ee9b056ce4e26d6eb5c9e74ebceab1296845d019b8eac2cccec58d6cafde1436b6f3334702719ff8e9c9d7fb3dea509b3a3892444e4d8c046afdc31f2667cbf6127217aaf65b9bc1450cca3ee71d31100dc9127fa6717454a8e850dcd38792c578c69bdec543aa7e7431a2c3545d9fe358e3865fa9c22fb7deb3bed99b3162672ea5c264f121f5e26aa3cc32111957d537a97cf8f3f4cbc5d191114f678902935a991ecb458bb14d3304b2d06b05cd6654a4f47d908bd235f465876a29f9dbb59c03eacff3756a794c736fdc3efdbd0ec8dce43a1fbe7f84206daae93e6b65571bd8b0044011108599ca73e10bd64195ab25967679444871f5e30b0711c259516c49260a1d5d2b0f642c1bada836ec72bc2e1bd9cd55b951ef54557157db29528c97d601d3a5832835ca93e7adaf3d9abaf40fbbb192036149c05947fc67e1607c65a7e9a89819a98fc8caa963a9bf125459e1be3713bfdb78fff687af3a02f7b33c8b504d4a4665c46e9e1ee879d887072bb275399b71c4bb48c3de76e4bd8b5d599e7f7649e044f89596a9245c35ae9ac7582c03d9f0c4cdff81a472768802fbd4d45055de53b24b3236821819dd7f76acc0aa756757f80c021ee9a40e6b43eb2d06293c0c6a951eede261b8a911870b42fa68ee41c61d6016ab0ce6850861e6fb644effa1e1b909987195dc6e7e27f2eb98b7c726cba08b4f089ffacc4ede490f2434853bc759abe5ff5a718a509b2cad58bf6817282e8265afea9fc619b6bfd48eb0c61993dda94c61867156883dc6a1be03ab4e407b3bb452ee723abb5ca80a4371a3ce9d6ee6ef481d2c7799d15ea22127d4fcd30b9d04e61847af9badbd59b6c6a0a4726595604eb372506378530b91b02d2852853b51cb3dfcfcb09f8a3a72c4f6d9945b8e934401c8d78fe7c3ef9decbd024e4b42bbb4cd00e0525810a2725e77af9b45d1982e68c1b1b685dc1e547ad1da22fc9a9c0f1a09baef5646027b85ee1fd5cc39aed5633743e1b437717c2feb5bc43948ddb78d932b10402ccdb7fb8ae43430c12c58cc163e6a400b53f45843cb77c35a1ae7e91edf01d8c101a6de338863fea54e2f7395b832a3734d8cb4c06771cbcf335019544d4fecaf077d4c34d2806491e241dee85cc4d293a41e9e6f35adb43b44259fe1e6ada41676a60e24cbd3da35afa56eb4b3d056723e70bcb5ec409341e1e659ef85d9062a74bc3e85000c3727a8a28e4f242247cbc933742c59f661c9fad1969e9bb2e000391d6565a050885fcf4968ed3a877b8389f624670a3ade1bd7eb4069ba380c5d6bd93684d6abde040d651866c002a6a1f250b972377b1435d81fcda2c4ab49c2576e91b5184ff75b38bae783e241f6820887b5215fe49104fd8d4c57e4df4f1dd5e0e279cba0bcdedf76dbd9d8c9ab1784f9bbc58ba8f22042d0db429e316614efb45a36977dc2f590acf002fc5e888581bc2c458b806000c427d382010c1dc07976b8c12afc80b9a19508c265c44b3fa9606b9e0aeff08b4cff2863e0bebbddf7e31e4050fea75cbcda020e600ea08faf3e6d34f06c5f294e4f902b03822965967305f88d35fc79314c67e43020f5a373341445ad2e8eacc793424458eae22c4a8a099db0379fae2b7152ed16d97981ce4cb8b3a61b8c3ca2bdbba3a8873f75c70b99f2f46911cd53f517b8038b96ae7e93be3357d238d2fa25acc8026db00058c8f15df4ad1084748b921e064d0e4554178bba07ad7b492666a7e44481cc20f4cd7e9eb5bb632458ff4613e7dca32ebbc2ade4c806e378839c87cc3c20da5d89d3615b60d17a8a4ebba28ed9240d84695a86246994186f04aab6bae252949af1079a4c1b47ba1ed6376f2773c5339f4ca962148564455e712f2823e2a5f108e794fb4fd23bb12ce4091556de20ca0fc25026d9b81448c234a5f8d11048dfa2368d61f598ef11ad48b1e5486db70576e25b336d6a58f52fc94a90b5242ccffd20cf68e6d611c070eea67baf193b7e963ae8e93f3b7462e3d3cb63399acaeff027dc61848780513be201727f740f097df683b1763387ab03a3bde49d9109a60b6abd18be4f9ef9e1757864c0fa4a398933dcf55b4456670b661b2a3dd0f65d3752c97d3c0a8ffd4a929f53d27bb0055627193488c983c74b0f9968f05be42a0f07f2477480961af0ddac0347ded2d2dcbe334598d6850742aa1c6e773a12e664e2fb1f9e6450ff4119fc3e98fcd8d49d12b628fa20ac5ca79c128f43f6b2d319702f232db5424314d54d0900ed9dbd75f2936a86f8c46c040dbf4ba3983445b9c41c96ce577b19e96f34a8f53f98ce515e62c2fd7608efe5d52c33e6447b778eedab1c6e69eb02a6b4c21d06796f5c696d8c6d63d6d6ad0d60170a5c5dd509767959294a3de2d12fcdd5d9d3483b5a9f2e950151f0e6a99f7b723c76019d64afe0fc7c4ebc2ff0ec501b9214ce86bd294f7f02c5ecce4bc174b7ccbdabec7684033d6aa582e404828cb8f831075a782b741b7d235786ccaff85e330c59ab35dc51b10c38e1eb412b3017516c8bf292a8a2b635af56c96905168a7405b59ed33b95bf914a35e7098bde3c3a74b438684a7c7ea5173befaa15b7b1d0831ab909c96a9144eea583d0a596e236771099e18edc2e13eb34a8bad6b15d193521c7eb475963fecb58635eaacfa04e14d7a5b8af044a40f0526fda1e8415ef8b47d423cf58f8aeee352027c61d3443b7ab881ac4384fcfa1d2af4973d5ecf5ffbc7a78440e68dc3faf97f38116857dd88d27d4dbd6a032e16e76a505c5c6b6ea1c17ed911c908aaa411283f25160ca9a3d071456fb2469d697b15fca26e0c0c6319e73ddf8a865e8d7bd4f3a77f056e5f92a72b16cfc7ca629f5d7e85dfff2930be74aaff7e5aff4a3a8b2beb16acda70b63292c6013374fb09cfef4d924b4e276220dfd65cb64753e50aade8d7b4b6e5fff2807088b0ad5a0acf26f96f87a0b6b016fcb03f9baafa7392a3ca50b945c43201f20e2af1a1e627cded03f0fe2925b4aa8e98123a2a4814f999872c4a4e81804a4a98aaf0cc5506fb5f8c72e177837be0aabaa23e8a54151a0f41ab2bedc642c71467581f2cf9a91c7c3e89c784a6a8e918af35b7d84e415c41ec0eeede38d79e07ae768efc5040b9bf1405229061cc2e198f86d7e8a5c7850144a6ecbe672ea694bf3df8df0b330f8592e95471f15a485f2021792d3c1aa58049c43f74a359e07e16a561c4cbf84babf41725cb4bb0290fc0a9636aa890b15a5ce27c34ace66767945094790db5d483e30fde0df4470031a28dc51e37fb1794f107b397369335b4d6c688151437a222f965a38f74ad6732b4473308dc9b53f8f288f397155e32ce3e6811d023673e9228ae807fe07790c60e1eed80bf9b3981ef7806c6e84edf35b9fb6c2f96dea44a012e6ca5a86eb304a591be942bc59eb9434f192cba0a008872a5f4b2484eb775823cbb1a9956df5dbe7ba6098536b376ea62f1398e44c1d7db90746a22daeec757bda141fbb78b139eed634483862a65b918e6700abd571f5e3395dd0fa3696e43a29fa13ba96a9c234a2cdc320daf7059d724cf2972078be41c1c965731b2e3de18233a3b4bdd2064a3695bbe4a305c134bf5ad9ec9fde67ac3d7795213e00db6c7501ef62abf78319cfb388a36f5f999efb981dd658d6fe3e92b2f994cf8ba03fd1317b01ed0143e5d241590e82b49a1ffd302211cd87e017c1196a83919d8d7f1b224558a09324c98685c0bae9229a9d589f135120a56c84192e9898f8b86133ac62e29082eb5917042bf14a18c8d21b6e552a59aef238d563f189efaeb9728caefd0"}}, &(0x7f00000011c0)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000001200)={{}, {0x77359400}}, &(0x7f0000001240))
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})

05:54:45 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x11}, 0x40)
clock_gettime(0xd4e8863c12c8ef23, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x38d881, 0x0)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000001c0)=0x1, 0x4)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x1)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
write$nbd(r1, &(0x7f00000002c0)={0x67446698, 0x1, 0x2, 0x2, 0x3, "ad8eae1d4661d738f1ee12b73d408fe291092eee92ab1660a024954a7d681f1aed0a1c5902aecd8001a28ade62823bb78991b4768061ce7e116e9756b51c3d14fa9e2525efa1ef1721198163c440135fc23389a928d29e12c47dd923edc13740b7f1448682aea29b2b5f0556bcf4bb687ad7ec390042696040c2f989d7f6bc43a134bdd108b56d1356432d32"}, 0x9c)
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
syz_open_dev$ndb(&(0x7f0000000280)='/dev/nbd#\x00', 0x0, 0x440000)
ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0xa4, 0x0, 0x4, 0x100, 0x7fff, {r2, r3/1000+60000}, {0x3, 0x8, 0x9, 0xc0, 0x3f, 0x8, "378954ed"}, 0x9, 0x4, @offset=0x7, 0x4, 0x0, <r4=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x8, 0x3, 0x4, 0x800, 0x80000001, {0x0, 0xea60}, {0x4, 0x2, 0x20, 0xff, 0x79, 0x1, "e7fc4cc4"}, 0xca0, 0x1, @userptr=0x9, 0x1, 0x0, r4})
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r5, 0x80685600, &(0x7f0000000080))
setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000380)=0xf50, 0x4)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000180)={0x1, 0x32314d56, 0x1, @stepwise={0x3, 0x3, 0x7b09298a, 0x9, 0x101, 0x7}})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x12345}, 0xffff)

05:54:45 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
r2 = syz_open_dev$vim2m(&(0x7f0000000140)='/dev/video#\x00', 0x10001, 0x2)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000180))
syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0xff3, 0x2)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000100)={0x1cfb1008, 0x30324c4a, 0x1, @stepwise={0x3, 0x63, 0xfffffff8, 0x3, 0x10000, 0x1}})

05:54:45 executing program 4:
clock_gettime(0x7, 0x0)

05:54:45 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000140)=0x10)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x7fffffff, 0x1, 0x4, 0x0, 0x1, {r1, r2/1000+10000}, {0x1, 0x1, 0x0, 0xc6, 0x1f, 0x0, 'A~Bq'}, 0xe7, 0x3, @offset=0x1f, 0x3, 0x0, r3})
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

05:54:46 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x7)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:46 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x6, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:46 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
clock_settime(0x1, &(0x7f0000000000)={0x77359400})

05:54:46 executing program 4:
clock_gettime(0x0, 0x0)

05:54:46 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
r2 = syz_open_dev$vim2m(&(0x7f0000000140)='/dev/video#\x00', 0x10001, 0x2)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000180))
syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0xff3, 0x2)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000100)={0x1cfb1008, 0x30324c4a, 0x1, @stepwise={0x3, 0x63, 0xfffffff8, 0x3, 0x10000, 0x1}})

05:54:46 executing program 3:
r0 = getpgrp(0xffffffffffffffff)
wait4(r0, 0x0, 0x0, 0x0)
move_pages(r0, 0xffffffffffffff13, 0x0, 0x0, 0x0, 0x4)

05:54:46 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000000))
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000080)={0x3, &(0x7f0000000040)="c348f00a46dc907779c0dcb6d0218371716f2e4871dffcc33738a7753497673f8b81ba30"})

05:54:46 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="69705f7674693000000073c100935500a1718f127f4a5cdfb287a62c184e4b3dc3ad054010ded28a5ffd61d00ee78435f73bef77b1586ae6ea612336ee7a2c360fefd6bd4003b815da228fd71eb8abf5d88a7e7c9004598bbfb281d6cbb315e0e7414efc0ac4fa312e0c69a111481624f566b88c2e0adfe2b7557f4f930a42e4a4f6", @ANYRES32=0x0, @ANYBLOB="002080000000000637d381b6431400cc00670000050490787f000001e0000002443cc2a1ac1414aa00000007ac1e000100000401ac1e010100000006ac141428000000f8e000000100000008ffffffff000000067f00000100000090830fa4ac1414bbe00000027f000001440c1801e00000020000003644349073ac1414aa00008001ac1414aa00000e2a6401010200000001ac1414aa00000008ac1414aa00010001ac1414bb000003ff442c6f41ffffffff00000020ffffffff00000006ac1e0101000000070000000000000004e00000020000000500"]})
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000200)={0x1000, 0x2})

05:54:46 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:46 executing program 5:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x6, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:46 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000fff000/0x1000)=nil], &(0x7f0000000040)=[0x8001, 0xb2, 0x4, 0x3, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x4)

05:54:46 executing program 0:
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
socket$inet6(0xa, 0x5, 0x10000)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x11, 0x4, 0x8, 0x100, 0x404, 0xffffffffffffffff, 0x7, [], 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3}, 0x40)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x80000, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00'})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000002c0))
socket$vsock_stream(0x28, 0x1, 0x0)

05:54:46 executing program 2:
clock_gettime(0x1, 0x0)
epoll_create1(0x80000)

05:54:46 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000040)={0x0, 0x6, 0x752, &(0x7f0000000000)=0x100000001})
clock_gettime(0xd4e8863c0000000b, 0x0)

05:54:46 executing program 2:
socket$xdp(0x2c, 0x3, 0x0)
clock_gettime(0x2, 0x0)

05:54:46 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:46 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages(0xffffffffffffffff, 0x9, &(0x7f0000000000)=[&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000080)=[0x7f, 0x6, 0x8, 0x7fffffff], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2)

05:54:46 executing program 5:
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', <r0=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', <r1=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@private}}, &(0x7f0000000580)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'team0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'team0\x00', <r4=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d40)={'erspan0\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=<r5=>0x0, @ANYBLOB="00080001000000ff8000000048110060006600004f4d8bfd9b9ad2e129907864010101ac14141e890a8f987e2587a0fcec940d4c98555f6704151e3c9cd25e1f44148d708000000200000fbf0000000400000002440cac419a14143f00000cde070f92e0000002ac14142eac9c52bb7878935207643c46ca11f95e745caba565549f3ed8a55556623238690e9becbc2f5a5eb0a3308245d9244a54d4ea8479ef2222f48094379138ad34a6d826ea4e6f7567f484d1bccfed1dd2501feff412eec381e58fc511c28c939c9cbfbb"]})
r6 = socket(0x10, 0x800, 0x401)
getsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x15, 0x101, 0x0, 0x1, 0x84, 0x1, 0xe66, [], 0x0, r6, 0x2, 0x2}, 0x40)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f00000007c0)={{0x0, 0xa6, 0x100, 0x2, 0x898c, 0x59, 0x5, 0xffff, 0x5, 0x3ff, 0x2, 0x5, 0x6, 0x801d, 0x40}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d80)={{{@in6=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{}, 0x0, @in6}}, &(0x7f0000000e80)=0xe8)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80008000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="dc020000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="38010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004008000000008000600", @ANYRES32=r0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=r1, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000200000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c9105000300060000000400040008000600"/60, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="f000028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ff0100003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004001a0e0000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=r8, @ANYBLOB], 0x2dc}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000)
personality(0x4000009)
clock_gettime(0x2, 0x0)
clock_settime(0x4, &(0x7f0000000740)={0x0, 0x3938700})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8)
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f0000000200)=[{&(0x7f0000000080)="5042be91d2afdf3922347ff2fe93aa8007b2b0285575086655d7b5ae8a91b3d03f48367f38d788b3fcf037f3b7c3b52e64c46eadb0f019cbd9d06273949640f9cbe23ce8", 0x44, 0x1ff}, {&(0x7f0000000100)="36832565dc2e5f9a55b0ae6bfe0faababe42b26156bdc92d0d519a3c9100acca1111c79aeefa7def3353e3f88097b967774317ad6bc90824a561a3cc9d87350a946ee1ba719c269448f07252bdbcb7518bf14eec4b65ee2eb3a9359c23c8d64e25a6bc8ef297f52243f681dcaaa99ca3e538b1e8907c5f57bddd352e85af905f2b15a3d9c748f9105c88cc84b312464b57fecab05736929ad5df0c0dd8370d72c56f24fb92efbc5fcbe2deda0278a31a274cf53f137fa5e43c5cd3c31bce3b9770b9c7967b500443f43728fb98dff9175346cfb5a2488ecde14eef70db079f13", 0xe0, 0x8}], 0x10, &(0x7f0000000380)={[{'{\\]'}, {'.'}, {'%%:)(-\'!):\xe0+^'}], [{@uid_eq={'uid', 0x3d, r9}}, {@dont_hash='dont_hash'}]})

05:54:46 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x9, 0x384c4150, 0x2, @discrete={0x3, 0x8}})

05:54:46 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x28980, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00')
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fcdbd7250b003a0006000000080039000100010008003a00060200"/46], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004)
clock_gettime(0xd4e8863c0000000b, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x3, 0x7, 0x1, 0x84000, r3})

05:54:47 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
r0 = syz_io_uring_setup(0x7507, &(0x7f00000000c0)={0x0, 0xf83c, 0x4, 0x1, 0x1de}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r1 = syz_mount_image$cramfs(&(0x7f00000001c0)='cramfs\x00', &(0x7f0000000200)='./file0\x00', 0x752, 0xa, &(0x7f00000026c0)=[{&(0x7f0000000240)="ca6587696dbf80d5fb63738186caf11609a9d91aea3443ddea2692558cd86fe9dc6e1d6078283544b380dcf61bd90ac6dd2d9f48447422ddec5dbb570dcfbfac4754e1371515a6c8606098a6379a75ebc8230b7f7175c9846d5b48bc0421321db5491a57ba4c21548404c2ff4ec1fd3412f70789841741a9603935768555af70b8", 0x81, 0xfeb}, {&(0x7f0000000300)="c4a238eb04d12e6340670ffccfddc45966a464171e01ecc788f4b374d2f5e134a3c528d1e30c1f3da0a638d1585bf14e6ecc1a435a41df0c20ce94c69778966e08e326ed5df111c8a8c1bec0fb4ef558f3266b33875a7552b8512b4c", 0x5c, 0xff}, {&(0x7f0000000380)="2289f9835b6737b7c4634b3ea19f1649b35c84ac91806ae39408268305c2d33fa17158a99c8cb0e219f8c5415c77297f9de901fbb3d1e3c51a2db5775e5dd6bcbd0a6d55cdf9152672068159ff18ca3410e22e2af71a65931538e58654462b9ff264d218e34686eafd427ca8ee759c7798c29fd9", 0x74, 0x1}, {&(0x7f0000000400)="7721f3adcad3209fe5f53202ae816edc738b397e64aaf23ce7cfdffd899870678c17140b5304013fbfff43b91135b491cb091c3c6fb27e51527b69fa4e5d10550183b36ebd633a96f8ce52c867fa3b9dec7151f7824e", 0x56, 0x3}, {&(0x7f0000000480)="8ea1ebd4e9482f895b3990e21e0c307f62aaa9a7afab94aec93ade05b94e4aa03ab152683595ad", 0x27, 0xfffffffffffffff7}, {&(0x7f00000004c0)="2c43a89ad91470bc53181a5b96345dd152c7c06c6845455d0f42317418523ad7e6ef65", 0x23, 0x6}, {&(0x7f0000000500)="aaf721c6c46191d4879219152e735c276c4ac03caf643fb6bc6e7a4c8d680da79f5632b5b95f9131b5365f0c9406ba040c5399e915055fe2c88a06c8f50479cd40d8631b824d71c40273df8ca52072dd8a0d1ca506512a98c6e8c661fd62cb2a4c48d429a9b3dea59c47e73968661eacef665fc4bb3cb8e0a54027385f68ec8a1a17e68760a451b86d4f07b6d23f48ee23f41ad7e8c5420b6131871e38fd88151d87b74c53578b6748fc9b218348ff0cd29db68d71b2059d13f79b44a2f00dbd0b0ef09ac6d58d4305e3", 0xca, 0xf1eb}, {&(0x7f0000000600)="12a307df156a87368174697ed1c2de74d657d008d06bbd218ffaf4be522cee8f4e20c193dbb0c28724692f11c53bb0cbd145eed38c6343907ff0e08b68b81c14b9b985fbf2c5a06fa3c615789896ee8a7737d39a9e18ee6e16629103068dea791daad0d3554ca9bff08a67958cbe7d7d1d2be3e78a5e456a675d236acd8946347a13b220799c5f298e226d905bf1e1bf3407a1f724bf", 0x96}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="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", 0x1000, 0x8}], 0x402, &(0x7f00000027c0)={[{'{'}, {'#}/'}], [{@euid_lt={'euid<', 0xee01}}, {@appraise_type='appraise_type=imasig'}, {@pcr={'pcr', 0x3d, 0x8}}, {@obj_user={'obj_user', 0x3d, '-'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, '!%-\\'}}, {@hash='hash'}, {@obj_user={'obj_user', 0x3d, '/{!$'}}, {@hash='hash'}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x1000006, 0x4088810, r0, 0x8000000)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x10, r0, 0x8000000)
syz_io_uring_setup(0x2fb8, &(0x7f0000002900)={0x0, 0x70f0, 0x10, 0x0, 0x299, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000002980), &(0x7f00000029c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000028c0)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r1, 0x0, &(0x7f0000002880)='./file1\x00', 0x2, 0x414320, 0x12345}, 0x5)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000000)="f20f01dcb9aa0a00000f32650f7906f2450f1ec0c441f928d1430f01cb45d825c0000000c463d90bc103440f20c03504000000440f22c0f336470f21fb", 0x3d}], 0x1, 0x6, &(0x7f0000000080)=[@cstype3={0x5, 0x5}], 0x1)

05:54:47 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x48, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:47 executing program 0:
socket$inet6(0xa, 0x3, 0x9)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x410002, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1727a2749b4747c9}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="218581df83ffddbad9", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fedbdf250c00000005002f000000000005002e000100000005002e000000000008003200810000000500380000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)

[ 2624.505734][T27435] loop5: detected capacity change from 1 to 0
[ 2624.557164][T27435] cramfs: Unknown parameter '{\]'
05:54:47 executing program 3:
clock_settime(0x0, &(0x7f0000000100))
r0 = msgget(0x0, 0x200)
msgctl$IPC_RMID(r0, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x2, "c074fc"}, 0xb, 0x0)
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
times(&(0x7f0000000140))
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x20, 0x4, 0x4, {0x2, @raw_data="274783bcb2003bb6816e18b8ab9a371a20a1953e9073a3956b9e591fbd1af672cb93743b8beeed4835a1f9141a810ea96b128ec07f2fb4105c383bc45150f4fb23693aa9a492919436a1f83c9b5c9dfa1a10986f784fe12660c5888cf69a75266a35e574ee305d6503080a681624646904428ef625d99aba360a9a48950b81c41e45b06da57f86e461eb5005c3daa083bdfc3f028b75fbfff7c04dbd1fa38905d6775e629b07f1a33ec4595a5f8f4f5acbbcd84f3c24634d6ffc928ba2230e786f3cb537fb3c0c42"}, 0x7})

05:54:47 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
r1 = gettid()
ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r1, 0x12)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
getitimer(0x0, &(0x7f0000000040))
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
io_uring_setup(0x1bd4, &(0x7f00000000c0)={0x0, 0xa79a, 0x2, 0x3, 0xfc, 0x0, r3})
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:47 executing program 4:
clock_gettime(0x4, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)

05:54:47 executing program 5:
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', <r0=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', <r1=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@private}}, &(0x7f0000000580)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'team0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'team0\x00', <r4=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d40)={'erspan0\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=<r5=>0x0, @ANYBLOB="00080001000000ff8000000048110060006600004f4d8bfd9b9ad2e129907864010101ac14141e890a8f987e2587a0fcec940d4c98555f6704151e3c9cd25e1f44148d708000000200000fbf0000000400000002440cac419a14143f00000cde070f92e0000002ac14142eac9c52bb7878935207643c46ca11f95e745caba565549f3ed8a55556623238690e9becbc2f5a5eb0a3308245d9244a54d4ea8479ef2222f48094379138ad34a6d826ea4e6f7567f484d1bccfed1dd2501feff412eec381e58fc511c28c939c9cbfbb"]})
r6 = socket(0x10, 0x800, 0x401)
getsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x15, 0x101, 0x0, 0x1, 0x84, 0x1, 0xe66, [], 0x0, r6, 0x2, 0x2}, 0x40)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f00000007c0)={{0x0, 0xa6, 0x100, 0x2, 0x898c, 0x59, 0x5, 0xffff, 0x5, 0x3ff, 0x2, 0x5, 0x6, 0x801d, 0x40}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d80)={{{@in6=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{}, 0x0, @in6}}, &(0x7f0000000e80)=0xe8)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80008000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="dc020000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="38010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004008000000008000600", @ANYRES32=r0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=r1, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000200000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c9105000300060000000400040008000600"/60, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="f000028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ff0100003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004001a0e0000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=r8, @ANYBLOB], 0x2dc}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000)
personality(0x4000009)
clock_gettime(0x2, 0x0)
clock_settime(0x4, &(0x7f0000000740)={0x0, 0x3938700})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8)
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f0000000200)=[{&(0x7f0000000080)="5042be91d2afdf3922347ff2fe93aa8007b2b0285575086655d7b5ae8a91b3d03f48367f38d788b3fcf037f3b7c3b52e64c46eadb0f019cbd9d06273949640f9cbe23ce8", 0x44, 0x1ff}, {&(0x7f0000000100)="36832565dc2e5f9a55b0ae6bfe0faababe42b26156bdc92d0d519a3c9100acca1111c79aeefa7def3353e3f88097b967774317ad6bc90824a561a3cc9d87350a946ee1ba719c269448f07252bdbcb7518bf14eec4b65ee2eb3a9359c23c8d64e25a6bc8ef297f52243f681dcaaa99ca3e538b1e8907c5f57bddd352e85af905f2b15a3d9c748f9105c88cc84b312464b57fecab05736929ad5df0c0dd8370d72c56f24fb92efbc5fcbe2deda0278a31a274cf53f137fa5e43c5cd3c31bce3b9770b9c7967b500443f43728fb98dff9175346cfb5a2488ecde14eef70db079f13", 0xe0, 0x8}], 0x10, &(0x7f0000000380)={[{'{\\]'}, {'.'}, {'%%:)(-\'!):\xe0+^'}], [{@uid_eq={'uid', 0x3d, r9}}, {@dont_hash='dont_hash'}]})

05:54:47 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x4c, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:47 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0])
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

05:54:47 executing program 2:
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xf5000, 0x10001})
clock_gettime(0x6, 0x0)
getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000040)=""/46)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f00000001c0)=0x10000)
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x5, 0x2, [0x3, 0x4, 0x2, 0xffffffff], [0x2, 0x3, 0xfff, 0x2], [0x1, 0x40, 0x6], [0x0, 0x7, 0x7, 0x49cd]})
r1 = msgget(0x0, 0x200)
msgctl$IPC_RMID(r1, 0x0)
msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000080)=""/41)

05:54:47 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r0, &(0x7f0000000140), 0x0, 0x0, 0x800, 0x1}, 0x211)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000000)=0x3)
r2 = socket$inet6(0xa, 0x3, 0x0)
openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x8000, 0x7, 0xa5f, 0x7, 0xe030, 0xffffffff, 0x7d1, 0x419}, &(0x7f0000000200)={0x7fff, 0x4d, 0xeb0, 0x5, 0x5, 0x200, 0x3, 0x2}, &(0x7f0000000240)={0xca36, 0x8, 0x2, 0x2, 0x9, 0x9, 0x401, 0x7d2}, &(0x7f0000000280), &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x60, 0x4, 0x3, {0x2, @pix={0x2, 0x2, 0x20343059, 0x1, 0x0, 0xd62a, 0x4, 0x1, 0x0, 0x8, 0x2, 0x6}}, 0xfffffffd})
r3 = userfaultfd(0x0)
ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, 0x2000})
clock_gettime(0x0, &(0x7f0000000500)={<r4=>0x0, <r5=>0x0})
pselect6(0x40, &(0x7f0000000440)={0x800, 0x8000000000, 0x1000200, 0x200, 0x6, 0xb046, 0x0, 0x100000001}, &(0x7f0000000480)={0xda5, 0x63580565, 0x7, 0x583, 0x8, 0x8, 0x1f, 0x2}, &(0x7f00000004c0)={0x6e, 0x1, 0x6, 0x5, 0x93, 0x5, 0x1, 0x1dcd}, &(0x7f0000000540)={r4, r5+60000000}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x4]}, 0x8})

05:54:47 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000000)={0x1})

[ 2625.052481][T27486] loop5: detected capacity change from 1 to 0
[ 2625.107625][T27486] cramfs: Unknown parameter '{\]'
05:54:47 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x700c, &(0x7f0000000000)={0x0, 0x4804, 0x8, 0x2, 0x121}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=<r0=>0x0)
syz_io_uring_submit(0x0, r0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x7, 0x0, 0xffffffffffffff9c, &(0x7f0000000100)={0x4000, 0x10, 0x8}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x12345}, 0x2)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000002c0)={0x7ff, 0x5, 0x4, 0x110000, 0x3, {0x77359400}, {0x2, 0x2, 0x3e, 0x7, 0x6, 0x9, "4b1593af"}, 0xfffffffe, 0x3, @userptr=0xffffffff, 0x3})
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x4000)

05:54:47 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x68, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:47 executing program 5:
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', <r0=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', <r1=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@private}}, &(0x7f0000000580)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'team0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'team0\x00', <r4=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d40)={'erspan0\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=<r5=>0x0, @ANYBLOB="00080001000000ff8000000048110060006600004f4d8bfd9b9ad2e129907864010101ac14141e890a8f987e2587a0fcec940d4c98555f6704151e3c9cd25e1f44148d708000000200000fbf0000000400000002440cac419a14143f00000cde070f92e0000002ac14142eac9c52bb7878935207643c46ca11f95e745caba565549f3ed8a55556623238690e9becbc2f5a5eb0a3308245d9244a54d4ea8479ef2222f48094379138ad34a6d826ea4e6f7567f484d1bccfed1dd2501feff412eec381e58fc511c28c939c9cbfbb"]})
r6 = socket(0x10, 0x800, 0x401)
getsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x15, 0x101, 0x0, 0x1, 0x84, 0x1, 0xe66, [], 0x0, r6, 0x2, 0x2}, 0x40)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f00000007c0)={{0x0, 0xa6, 0x100, 0x2, 0x898c, 0x59, 0x5, 0xffff, 0x5, 0x3ff, 0x2, 0x5, 0x6, 0x801d, 0x40}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d80)={{{@in6=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{}, 0x0, @in6}}, &(0x7f0000000e80)=0xe8)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80008000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="dc020000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="38010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004008000000008000600", @ANYRES32=r0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=r1, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000200000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c9105000300060000000400040008000600"/60, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="f000028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ff0100003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004001a0e0000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=r8, @ANYBLOB], 0x2dc}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000)
personality(0x4000009)
clock_gettime(0x2, 0x0)
clock_settime(0x4, &(0x7f0000000740)={0x0, 0x3938700})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8)
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f0000000200)=[{&(0x7f0000000080)="5042be91d2afdf3922347ff2fe93aa8007b2b0285575086655d7b5ae8a91b3d03f48367f38d788b3fcf037f3b7c3b52e64c46eadb0f019cbd9d06273949640f9cbe23ce8", 0x44, 0x1ff}, {&(0x7f0000000100)="36832565dc2e5f9a55b0ae6bfe0faababe42b26156bdc92d0d519a3c9100acca1111c79aeefa7def3353e3f88097b967774317ad6bc90824a561a3cc9d87350a946ee1ba719c269448f07252bdbcb7518bf14eec4b65ee2eb3a9359c23c8d64e25a6bc8ef297f52243f681dcaaa99ca3e538b1e8907c5f57bddd352e85af905f2b15a3d9c748f9105c88cc84b312464b57fecab05736929ad5df0c0dd8370d72c56f24fb92efbc5fcbe2deda0278a31a274cf53f137fa5e43c5cd3c31bce3b9770b9c7967b500443f43728fb98dff9175346cfb5a2488ecde14eef70db079f13", 0xe0, 0x8}], 0x10, &(0x7f0000000380)={[{'{\\]'}, {'.'}, {'%%:)(-\'!):\xe0+^'}], [{@uid_eq={'uid', 0x3d, r9}}, {@dont_hash='dont_hash'}]})

05:54:47 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
clock_getres(0x3, &(0x7f0000000000))
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)=0x1)

05:54:47 executing program 2:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00')
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000900)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000a00)=0xe8)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x2001)
clock_gettime(0xd4e8863c12c8ef23, 0x0)

05:54:47 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00'})
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400)='/dev/bsg\x00', 0x610400, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000240))
ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000003c0)={0x9e7, 0x3})
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x20481, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000180)={0x8, 0x59555956, 0x1, @stepwise={0x7fff, 0x6, 0x805, 0x8, 0x3c6, 0x7fff}})
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f00000002c0)={0x4, @pix_mp={0x8, 0xfffffffb, 0x32314d48, 0x1, 0x6, [{0x4, 0x9}, {0x8, 0x5}, {0x7f, 0x1ff}, {0x6, 0x3ff}, {0x0, 0x400}, {0xbdcf, 0x3}, {0x20, 0x1}, {0x7, 0xffffffff}], 0xfc, 0x4, 0x6, 0x2}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00'})
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x1292c0, 0x0)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0xb)
openat$cgroup_procs(r3, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)

[ 2625.465178][T27524] loop5: detected capacity change from 1 to 0
05:54:48 executing program 3:
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x80000, 0x400001)
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0})
pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x7, 0xfffffffffffffffe, 0x0, 0x6}, 0x0, &(0x7f0000000100)={r0, 0x0}, 0x0)
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2625.507802][T27524] cramfs: Unknown parameter '{\]'
05:54:48 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = msgget$private(0x0, 0x681)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000100)=0xe8)
r2 = gettid()
r3 = getpgrp(0xffffffffffffffff)
prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x14)
wait4(r3, 0x0, 0x0, 0x0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000140)={{0x0, r1, 0x0, 0xee00, 0x0, 0x100, 0x3}, 0x0, 0x0, 0x605, 0xfffffffffffffffc, 0x1, 0xffffffffffffffb0, 0x8c8, 0x23c, 0x55, 0x1000, r2, r3})

05:54:48 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
sendto$rose(r0, &(0x7f0000000140)="0b82920e1720999d06c2adad93786dcf4b3837010cfb3a8509fd523c42c940045646d91989937b0069f8ddfe55c9cc3562fc72e05be01f8b1ea5467c513e70238ee8da3c80d8058f57c895dcfe33738cd1cb40e55afe0b605cc8f43acb3a386a6d1003ba062c380013e1202ae85995c2219cc7e3", 0x74, 0x0, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c)
ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x1)
timer_getoverrun(0x0)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000008, 0x810, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'})
ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000000c0))

05:54:48 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000fe9000/0x1000)=nil, &(0x7f0000fea000/0x4000)=nil, 0x1000, 0x1})
clock_gettime(0xd4e8863c12c8ef23, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x2)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000000)="ba4100b80000eff3a4f3af0f72f7edf36dbaf80c66b87af4bc8a66efbafc0cb8bb00ef808c583ce8670f01cb0f4fe4baf80c66b8f837098066efbafc0c66ed", 0x3f}], 0x1, 0x0, &(0x7f0000000080), 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0)

05:54:48 executing program 5:
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', <r0=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', <r1=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@private}}, &(0x7f0000000580)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'team0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'team0\x00', <r4=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d40)={'erspan0\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=<r5=>0x0, @ANYBLOB="00080001000000ff8000000048110060006600004f4d8bfd9b9ad2e129907864010101ac14141e890a8f987e2587a0fcec940d4c98555f6704151e3c9cd25e1f44148d708000000200000fbf0000000400000002440cac419a14143f00000cde070f92e0000002ac14142eac9c52bb7878935207643c46ca11f95e745caba565549f3ed8a55556623238690e9becbc2f5a5eb0a3308245d9244a54d4ea8479ef2222f48094379138ad34a6d826ea4e6f7567f484d1bccfed1dd2501feff412eec381e58fc511c28c939c9cbfbb"]})
r6 = socket(0x10, 0x800, 0x401)
getsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x15, 0x101, 0x0, 0x1, 0x84, 0x1, 0xe66, [], 0x0, r6, 0x2, 0x2}, 0x40)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f00000007c0)={{0x0, 0xa6, 0x100, 0x2, 0x898c, 0x59, 0x5, 0xffff, 0x5, 0x3ff, 0x2, 0x5, 0x6, 0x801d, 0x40}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d80)={{{@in6=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{}, 0x0, @in6}}, &(0x7f0000000e80)=0xe8)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80008000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="dc020000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="38010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004008000000008000600", @ANYRES32=r0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=r1, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000200000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c9105000300060000000400040008000600"/60, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="f000028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ff0100003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004001a0e0000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=r8, @ANYBLOB], 0x2dc}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000)
personality(0x4000009)
clock_gettime(0x2, 0x0)
clock_settime(0x4, &(0x7f0000000740)={0x0, 0x3938700})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8)

05:54:48 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x6c, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:48 executing program 0:
socket$inet6(0xa, 0x3, 0x9)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r1 = socket(0x27, 0x3, 0x5)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r1, 0x0, &(0x7f0000000100)="ca6ce6b8dbc8f4e0c1341e9d940e59c954b188ad0c39ef93d3daadf55eb216d303f0e7a4a8cdb6b1aeeb84a2c5e5b5337cf6462bf007b2ed1a89342f4bf03c659a893f59d52081547e8c", 0x4a, 0x20008000, 0x5fb0446a1ccded57}, 0x1)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000040)={0x0, 0x7, 0x7ff, &(0x7f0000000000)=0xffffffff})

05:54:48 executing program 4:
clock_gettime(0x6, 0x0)
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
r2 = getpgrp(0xffffffffffffffff)
tgkill(0xffffffffffffffff, r2, 0x1e)
clock_settime(0x1, &(0x7f0000000040)={r0, r1+10000000})

05:54:48 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2)
prctl$PR_CAPBSET_DROP(0x18, 0x201d)
r0 = socket(0x1e, 0x5, 0x9)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4)

05:54:48 executing program 5:
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', <r0=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', <r1=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@private}}, &(0x7f0000000580)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'team0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'team0\x00', <r4=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d40)={'erspan0\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=<r5=>0x0, @ANYBLOB="00080001000000ff8000000048110060006600004f4d8bfd9b9ad2e129907864010101ac14141e890a8f987e2587a0fcec940d4c98555f6704151e3c9cd25e1f44148d708000000200000fbf0000000400000002440cac419a14143f00000cde070f92e0000002ac14142eac9c52bb7878935207643c46ca11f95e745caba565549f3ed8a55556623238690e9becbc2f5a5eb0a3308245d9244a54d4ea8479ef2222f48094379138ad34a6d826ea4e6f7567f484d1bccfed1dd2501feff412eec381e58fc511c28c939c9cbfbb"]})
r6 = socket(0x10, 0x800, 0x401)
getsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x15, 0x101, 0x0, 0x1, 0x84, 0x1, 0xe66, [], 0x0, r6, 0x2, 0x2}, 0x40)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f00000007c0)={{0x0, 0xa6, 0x100, 0x2, 0x898c, 0x59, 0x5, 0xffff, 0x5, 0x3ff, 0x2, 0x5, 0x6, 0x801d, 0x40}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d80)={{{@in6=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{}, 0x0, @in6}}, &(0x7f0000000e80)=0xe8)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80008000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="dc020000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="38010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004008000000008000600", @ANYRES32=r0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=r1, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000200000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c9105000300060000000400040008000600"/60, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="f000028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ff0100003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004001a0e0000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=r8, @ANYBLOB], 0x2dc}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000)
personality(0x4000009)
clock_gettime(0x2, 0x0)
clock_settime(0x4, &(0x7f0000000740)={0x0, 0x3938700})

05:54:48 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
set_tid_address(&(0x7f0000000000))

05:54:48 executing program 0:
timer_create(0x2, &(0x7f0000000000)={0x0, 0x6, 0x1}, &(0x7f0000000040)=<r0=>0x0)
timer_delete(r0)
r1 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r1, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)

05:54:48 executing program 2:
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0x2e75, 0x7357})
clock_gettime(0xd4e8863c12c8ef23, 0x0)

05:54:48 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x74, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:48 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000000c0))
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r3, 0x400448df, &(0x7f0000000180)="99f233a57522cfbde5a9639439cd984d0855d8dbab32ae3941233bad673ee3ee789f079cd2c29cb925e73e300e016ab351acbb070bff32d3846ab6ef669382b0b08dbdc72bbf69743efff05283831bf00a6c852a405c3f4d05eee12cc7e3789e14dddd99dfb43a77681ce07a97b33f130975c307412a5c047801cd6ff9d0636d80877f5a0641e6b55562e62022e46a5c01a8d912f1fb4c85")
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x880, 0x0)
getsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
ioctl$NBD_CLEAR_QUE(r4, 0xab05)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
timer_delete(0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x2007, @fd=r0, 0x4, &(0x7f0000000000)="548c76dc80042473f33e4d1eaadc35b73c0bb7372970adfc3ded77b461274595a7c1d011dc325b2237992710a79e599aefbd32e8a3131ded45a3e159a4a7417399a322e23099b707816d6eab57f55ed33baf4cc62698c0c44fd66bf02ee152ca408ee6ece958565dc0", 0x69, 0x10, 0x1}, 0x6)

05:54:48 executing program 5:
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', <r0=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', <r1=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@private}}, &(0x7f0000000580)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'team0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'team0\x00', <r4=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d40)={'erspan0\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=<r5=>0x0, @ANYBLOB="00080001000000ff8000000048110060006600004f4d8bfd9b9ad2e129907864010101ac14141e890a8f987e2587a0fcec940d4c98555f6704151e3c9cd25e1f44148d708000000200000fbf0000000400000002440cac419a14143f00000cde070f92e0000002ac14142eac9c52bb7878935207643c46ca11f95e745caba565549f3ed8a55556623238690e9becbc2f5a5eb0a3308245d9244a54d4ea8479ef2222f48094379138ad34a6d826ea4e6f7567f484d1bccfed1dd2501feff412eec381e58fc511c28c939c9cbfbb"]})
r6 = socket(0x10, 0x800, 0x401)
getsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x15, 0x101, 0x0, 0x1, 0x84, 0x1, 0xe66, [], 0x0, r6, 0x2, 0x2}, 0x40)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f00000007c0)={{0x0, 0xa6, 0x100, 0x2, 0x898c, 0x59, 0x5, 0xffff, 0x5, 0x3ff, 0x2, 0x5, 0x6, 0x801d, 0x40}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d80)={{{@in6=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{}, 0x0, @in6}}, &(0x7f0000000e80)=0xe8)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80008000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="dc020000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="38010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004008000000008000600", @ANYRES32=r0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=r1, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000200000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c9105000300060000000400040008000600"/60, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="f000028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ff0100003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004001a0e0000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=r8, @ANYBLOB], 0x2dc}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000)
personality(0x4000009)
clock_gettime(0x2, 0x0)

05:54:48 executing program 3:
r0 = gettid()
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000))
move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

05:54:48 executing program 0:
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x1ff, 0x38303553, 0x2, @stepwise={0x17f3ec56, 0x100, 0x43, 0x800, 0x1ff, 0x4}})
r0 = socket$inet6(0xa, 0x5, 0x2)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:48 executing program 5:
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', <r0=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', <r1=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@private}}, &(0x7f0000000580)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'team0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'team0\x00', <r4=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d40)={'erspan0\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=<r5=>0x0, @ANYBLOB="00080001000000ff8000000048110060006600004f4d8bfd9b9ad2e129907864010101ac14141e890a8f987e2587a0fcec940d4c98555f6704151e3c9cd25e1f44148d708000000200000fbf0000000400000002440cac419a14143f00000cde070f92e0000002ac14142eac9c52bb7878935207643c46ca11f95e745caba565549f3ed8a55556623238690e9becbc2f5a5eb0a3308245d9244a54d4ea8479ef2222f48094379138ad34a6d826ea4e6f7567f484d1bccfed1dd2501feff412eec381e58fc511c28c939c9cbfbb"]})
r6 = socket(0x10, 0x800, 0x401)
getsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x15, 0x101, 0x0, 0x1, 0x84, 0x1, 0xe66, [], 0x0, r6, 0x2, 0x2}, 0x40)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f00000007c0)={{0x0, 0xa6, 0x100, 0x2, 0x898c, 0x59, 0x5, 0xffff, 0x5, 0x3ff, 0x2, 0x5, 0x6, 0x801d, 0x40}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d80)={{{@in6=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{}, 0x0, @in6}}, &(0x7f0000000e80)=0xe8)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80008000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="dc020000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="38010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004008000000008000600", @ANYRES32=r0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=r1, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000200000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c9105000300060000000400040008000600"/60, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="f000028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ff0100003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004001a0e0000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=r8, @ANYBLOB], 0x2dc}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000)
personality(0x4000009)

05:54:48 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0)
write$capi20_data(r0, &(0x7f0000000040)={{0x10, 0x5, 0xff, 0x83, 0x5d90, 0x7f}, 0x42, "386113045e2a61c79ebd3e23373c1b35ca89e44853dd847900539917ec46ce06128960ef95c2717975ab6cf0d796b7dce06e30b3eecd89f01631b64f7debf09a1ae8"}, 0x54)
clock_gettime(0xd4e8863c12c8ef23, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f00000000c0)=0x1)

05:54:48 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x33de6b19fba768c})

05:54:48 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x6, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="9c1f3a9d2eda517424819f613e9d39dd4401fc2cdf93d1e61fb2c076a457f1770a9d36f58d6ddaf1f6b6890d2766b1d88f493f6b226e8318588381e879f1c7b099405f72fb344cda36d5b482ec90a4091e47e6ebe278b86c2a3b42574fcc373d5f1663b53ebad96112caae42d095f274b67636dc289a34d333000a10e081a72a64a60dd40f7045ce1c0ffeef169e15dd04041af9c3bba4f05e745436452211ef3f093ed70ccea0449f7356265caa", 0xae, 0x92}], 0x1, &(0x7f0000000180)={[], [{@appraise_type='appraise_type=imasig'}, {@context={'context', 0x3d, 'user_u'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_role={'obj_role', 0x3d, '-!'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '#-&['}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':*+\xa8/'}}, {@dont_hash='dont_hash'}, {@measure='measure'}, {@dont_appraise='dont_appraise'}]})
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000240)=@v1={0x0, @aes128, 0x3, @desc4='\x85\xba\xa1t\xf0\xcb\x11B'})

05:54:48 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x7a, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:49 executing program 5:
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', <r0=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', <r1=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@private}}, &(0x7f0000000580)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'team0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'team0\x00', <r4=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d40)={'erspan0\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=<r5=>0x0, @ANYBLOB="00080001000000ff8000000048110060006600004f4d8bfd9b9ad2e129907864010101ac14141e890a8f987e2587a0fcec940d4c98555f6704151e3c9cd25e1f44148d708000000200000fbf0000000400000002440cac419a14143f00000cde070f92e0000002ac14142eac9c52bb7878935207643c46ca11f95e745caba565549f3ed8a55556623238690e9becbc2f5a5eb0a3308245d9244a54d4ea8479ef2222f48094379138ad34a6d826ea4e6f7567f484d1bccfed1dd2501feff412eec381e58fc511c28c939c9cbfbb"]})
r6 = socket(0x10, 0x800, 0x401)
getsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x15, 0x101, 0x0, 0x1, 0x84, 0x1, 0xe66, [], 0x0, r6, 0x2, 0x2}, 0x40)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f00000007c0)={{0x0, 0xa6, 0x100, 0x2, 0x898c, 0x59, 0x5, 0xffff, 0x5, 0x3ff, 0x2, 0x5, 0x6, 0x801d, 0x40}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d80)={{{@in6=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{}, 0x0, @in6}}, &(0x7f0000000e80)=0xe8)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80008000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="dc020000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="38010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004008000000008000600", @ANYRES32=r0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=r1, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000200000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c9105000300060000000400040008000600"/60, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="f000028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ff0100003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004001a0e0000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=r8, @ANYBLOB], 0x2dc}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000)

[ 2626.562119][T27616] cramfs: Unknown parameter 'appraise_type'
05:54:49 executing program 0:
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = socket$inet6(0xa, 0x4, 0x9)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x8a200, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000002c0)={0x807, 0x3869, 0x4, 0x101, 0x3, [0x1, 0x9, 0x3, 0x9], [0x3, 0x2, 0x66, 0xffff7d08], [0x80000000, 0x80000000, 0x8, 0x3ff], [0x1f, 0x8, 0x5, 0x9]})
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000000c0))

05:54:49 executing program 3:
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb, 0x20010, 0xffffffffffffffff, 0x0)

05:54:49 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x8000000)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000040)=0x20, 0x8)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd, 0x1, 0x0, 0x7b20, 0x2}, 0x1ff)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000080)=@ax25={{0x3, @default}, [@default, @rose, @default, @remote, @rose, @netrom, @default, @netrom]}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/236, 0xec}], 0x1, &(0x7f0000000240)=""/4096, 0x1000}, 0x40000143)

05:54:49 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x16800, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00')
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>0x0, 0x10, 0x8000, 0x0, 0x200, {{0xb, 0x4, 0x1, 0x5, 0x2c, 0x67, 0x0, 0x3, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@ra={0x94, 0x4}, @end, @ssrr={0x89, 0x13, 0x1d, [@rand_addr=0x64010102, @empty, @dev={0xac, 0x14, 0x14, 0xa}, @loopback]}]}}}}})
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x80)
write$nbd(r0, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x2, 0x1, "6ee43609dc5373c9eeb1705b953a3d9ec92494823c53376ab4f481b25855ec1d5b5ed58cc53b268b3b21e8926ff58c3a62a3040052764bf9b59ef771f524d7b2f9f0a49b9dd1545cc3eef6e23fa83e7a05c1b7ae3a9bf396df87c1828979e24c65adb88befd1adb6e4919c3ffa563812cbd2216f56b3eb2812"}, 0x89)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x448f02, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00'})
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f0000000080)=0x10)
clock_gettime(0x1, 0x0)

05:54:49 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xfe, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:49 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
r1 = socket$inet6(0xa, 0x800, 0x20)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x5e601fb974f961fa, 0x0, 0x0, 0xffffffffffffe432, &(0x7f0000000000)=[r0, r1, r0, r0, 0xffffffffffffffff], 0x5}, 0xef3)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:49 executing program 5:
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00'})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in=@private}}, &(0x7f0000000580)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'team0\x00'})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d40)={'erspan0\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00080001000000ff8000000048110060006600004f4d8bfd9b9ad2e129907864010101ac14141e890a8f987e2587a0fcec940d4c98555f6704151e3c9cd25e1f44148d708000000200000fbf0000000400000002440cac419a14143f00000cde070f92e0000002ac14142eac9c52bb7878935207643c46ca11f95e745caba565549f3ed8a55556623238690e9becbc2f5a5eb0a3308245d9244a54d4ea8479ef2222f48094379138ad34a6d826ea4e6f7567f484d1bccfed1dd2501feff412eec381e58fc511c28c939c9cbfbb"]})
r0 = socket(0x10, 0x800, 0x401)
getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x15, 0x101, 0x0, 0x1, 0x84, 0x1, 0xe66, [], 0x0, r0, 0x2, 0x2}, 0x40)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000007c0)={{0x0, 0xa6, 0x100, 0x2, 0x898c, 0x59, 0x5, 0xffff, 0x5, 0x3ff, 0x2, 0x5, 0x6, 0x801d, 0x40}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d80)={{{@in6=@initdev, @in6=@remote}}, {{}, 0x0, @in6}}, &(0x7f0000000e80)=0xe8)

05:54:49 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
write$tcp_mem(r0, &(0x7f0000000100)={0x18, 0x20, 0x2, 0x20, 0x1ff}, 0x48)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}})

05:54:49 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)

05:54:49 executing program 5:
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00'})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in=@private}}, &(0x7f0000000580)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'team0\x00'})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d40)={'erspan0\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00080001000000ff8000000048110060006600004f4d8bfd9b9ad2e129907864010101ac14141e890a8f987e2587a0fcec940d4c98555f6704151e3c9cd25e1f44148d708000000200000fbf0000000400000002440cac419a14143f00000cde070f92e0000002ac14142eac9c52bb7878935207643c46ca11f95e745caba565549f3ed8a55556623238690e9becbc2f5a5eb0a3308245d9244a54d4ea8479ef2222f48094379138ad34a6d826ea4e6f7567f484d1bccfed1dd2501feff412eec381e58fc511c28c939c9cbfbb"]})
r0 = socket(0x10, 0x800, 0x401)
getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x15, 0x101, 0x0, 0x1, 0x84, 0x1, 0xe66, [], 0x0, r0, 0x2, 0x2}, 0x40)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000007c0)={{0x0, 0xa6, 0x100, 0x2, 0x898c, 0x59, 0x5, 0xffff, 0x5, 0x3ff, 0x2, 0x5, 0x6, 0x801d, 0x40}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})

05:54:49 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in6, @in=@private}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8)

05:54:49 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x300, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:49 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
sendto$rose(r1, &(0x7f0000000100)="4697d36b3bbd10ae8b775827eb435c8310da8af78cc510798d00d00dfab8f0f8cd293a3ffe0f91c9fb81cd60c2dbd138302c29b02d67f9cf58d3279fc9907fe664338b582b580a492fceff37badea68ed2fe55a2ed75c30e9ed988de1871eb95c79174e007a99ae19579fd16429f4008cd8df6da80c89084", 0x78, 0x1, 0x0, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$NBD_CLEAR_SOCK(r0, 0xab04)
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

05:54:49 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x845)
socket$inet(0x2, 0x6, 0x8)
socket$inet(0x2, 0x0, 0x401)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:49 executing program 5:
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00'})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in=@private}}, &(0x7f0000000580)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'team0\x00'})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d40)={'erspan0\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00080001000000ff8000000048110060006600004f4d8bfd9b9ad2e129907864010101ac14141e890a8f987e2587a0fcec940d4c98555f6704151e3c9cd25e1f44148d708000000200000fbf0000000400000002440cac419a14143f00000cde070f92e0000002ac14142eac9c52bb7878935207643c46ca11f95e745caba565549f3ed8a55556623238690e9becbc2f5a5eb0a3308245d9244a54d4ea8479ef2222f48094379138ad34a6d826ea4e6f7567f484d1bccfed1dd2501feff412eec381e58fc511c28c939c9cbfbb"]})
r0 = socket(0x10, 0x800, 0x401)
getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x15, 0x101, 0x0, 0x1, 0x84, 0x1, 0xe66, [], 0x0, r0, 0x2, 0x2}, 0x40)

05:54:49 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
clock_gettime(0x0, &(0x7f00000000c0))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2}, 0x3f)
pselect6(0x40, &(0x7f0000000000)={0x3, 0x400000000, 0x2, 0x800000000000000, 0x5368, 0xfd, 0xffffffff, 0x7}, &(0x7f0000000040)={0xef4f, 0x9, 0x8, 0xffffffff7fffffff, 0x1f, 0x7, 0x7ffffffb, 0x40}, &(0x7f0000000080)={0xfffe0, 0x4, 0x9110c6e, 0x7, 0x4, 0x7f000000000000, 0x4, 0x6}, &(0x7f0000000100), &(0x7f00000001c0)={&(0x7f0000000140)={[0x4]}, 0x8})

05:54:49 executing program 4:
syz_open_dev$dri(&(0x7f0000000340)='/dev/dri/card#\x00', 0x20, 0x422000)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000380))
clock_gettime(0xd4e8863c0000000b, 0x0)
sysfs$2(0x2, 0x800, &(0x7f0000000000)=""/244)

[ 2627.302887][T27682] loop1: detected capacity change from 1 to 0
05:54:49 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x2000, 0x1})

05:54:49 executing program 5:
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00'})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in=@private}}, &(0x7f0000000580)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'team0\x00'})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d40)={'erspan0\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00080001000000ff8000000048110060006600004f4d8bfd9b9ad2e129907864010101ac14141e890a8f987e2587a0fcec940d4c98555f6704151e3c9cd25e1f44148d708000000200000fbf0000000400000002440cac419a14143f00000cde070f92e0000002ac14142eac9c52bb7878935207643c46ca11f95e745caba565549f3ed8a55556623238690e9becbc2f5a5eb0a3308245d9244a54d4ea8479ef2222f48094379138ad34a6d826ea4e6f7567f484d1bccfed1dd2501feff412eec381e58fc511c28c939c9cbfbb"]})
r0 = socket(0x10, 0x800, 0x401)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x15, 0x101, 0x0, 0x1, 0x84, 0x1, 0xe66, [], 0x0, r0, 0x2, 0x2}, 0x40)

[ 2627.392943][T27682] loop1: detected capacity change from 1 to 0
05:54:50 executing program 0:
r0 = getpgrp(0xffffffffffffffff)
ioprio_set$pid(0x2, r0, 0x6000)
r1 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:50 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x500, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:50 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x48400, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0x2, 0x4}, 0x6)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r3 = userfaultfd(0x80800)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0xb})
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000008, 0x11, r0, 0x83000000)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100))
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$CAPI_GET_SERIAL(r2, 0xc0044308, &(0x7f0000000000)=0x2)
r4 = syz_open_dev$vim2m(&(0x7f0000000280)='/dev/video#\x00', 0xe3d0, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f00000002c0)={0x1, 0x2, 0x4, 0x10000, 0x7, {0x0, 0x2710}, {0x2, 0xe, 0x80, 0x5, 0x3, 0x4, "a7c59baf"}, 0x96, 0x1, @userptr=0x7, 0x9, 0x0, r2})
r5 = getpgrp(0xffffffffffffffff)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0)
wait4(r5, 0x0, 0x0, 0x0)
rt_sigqueueinfo(r5, 0x1, &(0x7f0000000380)={0x1f, 0x0, 0x5})
socket$nl_generic(0x10, 0x3, 0x10)

05:54:50 executing program 2:
clock_gettime(0x2, 0x0)

05:54:50 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000100), &(0x7f00000000c0)=0x4)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x400)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$NBD_CLEAR_QUE(r2, 0xab05)
ioctl$NBD_CLEAR_QUE(r1, 0xab05)

05:54:50 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x4, 0x1, 0x3ff)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', <r1=>0x0, 0x8000, 0x1, 0x9, 0x0, {{0x10, 0x4, 0x0, 0x9, 0x40, 0x66, 0xfffa, 0x80, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @local, {[@noop, @end, @timestamp_prespec={0x44, 0xc, 0xe, 0x3, 0x4, [{@loopback, 0x8}]}, @noop, @rr={0x7, 0x1b, 0xe5, [@empty, @multicast1, @multicast2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}]}}}}})
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000001600)=@can={0x1d, <r2=>0x0}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001680)=""/28, 0x1c}, {&(0x7f00000016c0)=""/78, 0x4e}], 0x2, &(0x7f0000001780)=""/205, 0xcd}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001a40)={&(0x7f00000018c0)={0x148, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x2c, 0x4, [{0x200, 0x1f, 0x2, 0x80000000}, {0x1, 0x55, 0x1, 0x5}, {0x8001, 0x0, 0x28, 0x2}, {0x3, 0x70, 0x1, 0xff}, {0x8, 0x5, 0x1, 0x3f}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1c0000}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r2}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x1ff, 0x1, 0x1, 0x7}, {0x46, 0x40, 0x20, 0x1}, {0x8000, 0x7f, 0x3, 0x22}]}}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4040044}, 0x20080850)

05:54:50 executing program 5:
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00'})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in=@private}}, &(0x7f0000000580)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'team0\x00'})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d40)={'erspan0\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00080001000000ff8000000048110060006600004f4d8bfd9b9ad2e129907864010101ac14141e890a8f987e2587a0fcec940d4c98555f6704151e3c9cd25e1f44148d708000000200000fbf0000000400000002440cac419a14143f00000cde070f92e0000002ac14142eac9c52bb7878935207643c46ca11f95e745caba565549f3ed8a55556623238690e9becbc2f5a5eb0a3308245d9244a54d4ea8479ef2222f48094379138ad34a6d826ea4e6f7567f484d1bccfed1dd2501feff412eec381e58fc511c28c939c9cbfbb"]})
bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x15, 0x101, 0x0, 0x1, 0x84, 0x1, 0xe66, [], 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x40)

05:54:50 executing program 4:
clock_gettime(0x6, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@dev, @in=@private}}, {{}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x4080, 0x0)

05:54:50 executing program 2:
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0xfffffff8, 0x4)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$CAPI_INSTALLED(r0, 0x80024322)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x7, {0x77359400}, {0x2, 0x0, 0x1, 0x7f, 0xf6, 0x81, "077e05f2"}, 0x0, 0x1, @offset=0x2, 0xa1a, 0x0, r2})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x20010, r0, 0x8000000)

[ 2627.759086][T27719] loop1: detected capacity change from 2 to 0
[ 2627.837258][T27719] loop1: detected capacity change from 2 to 0
05:54:50 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x80, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000080)={r1, r2/1000+10000}, 0x10)

05:54:50 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x600, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:50 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00'})
openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
socket(0x18, 0x1, 0x80)
socket$inet_udp(0x2, 0x2, 0x0)

05:54:50 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x541000, 0x0)
write$capi20(r0, &(0x7f0000000040)={0x10, 0xfffa, 0x83, 0x80, 0x401, 0x8}, 0x10)

05:54:50 executing program 5:
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00'})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in=@private}}, &(0x7f0000000580)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'team0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x15, 0x101, 0x0, 0x1, 0x84, 0x1, 0xe66, [], 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x40)

05:54:50 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x0, 0x6, 0x9, 0x100800})

05:54:50 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x15)

05:54:50 executing program 5:
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00'})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in=@private}}, &(0x7f0000000580)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'team0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x15, 0x101, 0x0, 0x1, 0x84, 0x1, 0xe66, [], 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x40)

[ 2628.154132][T27754] loop1: detected capacity change from 3 to 0
05:54:50 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
personality(0x400000a)

[ 2628.244321][T27754] loop1: detected capacity change from 3 to 0
05:54:50 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x700, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:50 executing program 3:
gettid()
prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0xf)
r0 = getpgrp(0xffffffffffffffff)
wait4(r0, 0x0, 0x0, 0x0)
move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x2)

05:54:50 executing program 2:
clock_gettime(0x0, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000002780)={0x0, @rc={0x1f, @none, 0x1}, @xdp={0x2c, 0x1, 0x0, 0x5}, @xdp={0x2c, 0x2, <r1=>0x0, 0x36}, 0x10, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002740)='erspan0\x00', 0x100000001, 0xd2, 0x4})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002800)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000002b00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002840)={0x26c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x250, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xfc}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x3d7070cd}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x80}}}]}}]}, 0x26c}, 0x1, 0x0, 0x0, 0x40000}, 0x801)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1})
clock_gettime(0x0, &(0x7f0000000000)={<r3=>0x0, <r4=>0x0})
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x7, 0x2, 0x4, 0x100000, 0x9, {r3, r4/1000+60000}, {0x1, 0xd, 0x3f, 0x32, 0x8, 0x1, "0d61d6ea"}, 0x1ff, 0x2, @fd, 0xfffffff9, 0x0, <r5=>0xffffffffffffffff})
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x5, 0x5, 0x4, 0xd4a351513841cfde, 0xb3cc, {0x77359400}, {0x1, 0x1, 0xff, 0x81, 0x1e, 0x1, "957d4ce3"}, 0x90e, 0x1, @fd, 0x1, 0x0, r5})

05:54:50 executing program 4:
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000080)={0x3, 0x2, 0x4, 0x1000, 0x0, {r0, r1/1000+60000}, {0x1, 0xc, 0x7, 0x6, 0x6, 0x3, "d47709b8"}, 0x4, 0x4, @planes=&(0x7f0000000040)={0xfffffffe, 0x6e9b, @mem_offset=0x3, 0x3}, 0xe9, 0x0, r2})
clock_gettime(0xd4e8863c0000000b, 0x0)

05:54:50 executing program 0:
r0 = socket$inet6(0xa, 0x4, 0xa7ea)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r2 = gettid()
pselect6(0x40, &(0x7f0000001300)={0x3f, 0x35f, 0x1000, 0x7, 0xff, 0x5, 0x8, 0xfffffffffffffffc}, &(0x7f0000001340)={0xffffffffffff7e38, 0x4, 0x4, 0x5, 0x8, 0x1ff, 0x2, 0x1}, &(0x7f0000001380)={0xffffffff, 0x4, 0x0, 0x200, 0xe4a5, 0xcd4, 0x7, 0x800}, &(0x7f00000013c0)={0x0, 0x989680}, &(0x7f0000001440)={&(0x7f0000001400)={[0x3ff]}, 0x8})
write$cgroup_pid(r1, &(0x7f0000000180)=r2, 0x12)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="b7ebce542568a4fc6ea1dff69b053d0e0652f4d222faa8859af4f53eb221c4ecd0f555bdaa6cfd33975c1e387c29fdd7db75769c090600d01b5b3d9da0ae1432f5adad7e9d4b063b514a6b1347", @ANYRES16=0x0, @ANYBLOB="00012cbd700100dbdf250c0000002b0002000000000500003b00faff000000000000000000000100000000000000000000000000000000000000000000000000030000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
write$tcp_mem(0xffffffffffffffff, &(0x7f00000000c0)={0xbeef, 0x20, 0x1, 0x20, 0x80}, 0x48)
rt_sigprocmask(0x3, &(0x7f00000001c0)={[0x1]}, &(0x7f0000000200), 0x8)
r3 = gettid()
r4 = gettid()
rt_tgsigqueueinfo(r3, r4, 0x2a, &(0x7f00000014c0)={0x27, 0x1})
sysfs$2(0x2, 0x1, &(0x7f0000000300)=""/4096)
clock_gettime(0x1, &(0x7f0000001480))

05:54:51 executing program 5:
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00'})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in=@private}}, &(0x7f0000000580)=0xe8)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x15, 0x101, 0x0, 0x1, 0x84, 0x1, 0xe66, [], 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x40)

05:54:51 executing program 3:
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2628.520606][T27786] loop1: detected capacity change from 3 to 0
05:54:51 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x5, 0x5})

05:54:51 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100)=<r0=>0x0, &(0x7f0000000140))
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0)
syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r1, 0xe812, {0x0, r2}, 0xe7e, 0x0, 0x1, {0x0, 0x0, r3}}, 0x9b31)
clock_gettime(0x0, &(0x7f0000000000)={<r4=>0x0, <r5=>0x0})
clock_settime(0x4, &(0x7f0000000040)={r4, r5+60000000})

[ 2628.647997][T27786] loop1: detected capacity change from 3 to 0
05:54:51 executing program 5:
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x15, 0x101, 0x0, 0x1, 0x84, 0x1, 0xe66, [], 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x40)

05:54:51 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x1020, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:51 executing program 2:
clock_gettime(0x3, 0x0)

05:54:51 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0x2, 0x6})
clock_gettime(0x0, &(0x7f0000000140)={<r1=>0x0, <r2=>0x0})
clock_settime(0x7, &(0x7f0000000180)={r1, r2+60000000})
clock_gettime(0x0, &(0x7f0000000040)={<r3=>0x0, <r4=>0x0})
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0x40, 0x1, 0x4, 0x70000, 0x1, {r3, r4/1000+60000}, {0x4, 0x2, 0x8b, 0x80, 0x5, 0x2, "c0cb0ee8"}, 0x8, 0x3, @offset=0x8001, 0x9})
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

05:54:51 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0x8, 0xfffffff9})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000003c0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x4000, 0x1})
syz_mount_image$cramfs(&(0x7f0000000100)='cramfs\x00', &(0x7f0000000140)='./file0\x00', 0x4, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="1e4a7dd3596e59a3922501615a2ed2debbed5e2188a7eb9ec7fe9852effb73bdf8a723a632555bea737189c3ee16a650dffc47aedf515fe643f6d6425558bcd296e8b95b02bc63bb82bc56581b47654136512e49761600fb76ae0b860fa4f794a15b6d2b2f80ae7792b358eb1031947f32584eae31e24b0fb4d821c897d97638d47748920aff96278d52e2baa75b4b75449970375a89a8047e5289367b008e94c06aec3325cd3d6df84f467ecf5d48f7ea", 0xb1, 0x50000000000000}], 0x1000000, &(0x7f0000000300)=ANY=[@ANYBLOB="2f6465762f627367002c2f6465762f627367002c6367726f75702e70726f6373002c2c1d6465762f627367002c2c7063723d3030303030303030303030307f569bafa7e7585c1a30303030303033392c66736e616d653d2c6673757569643d62636337363032342d623961652d633056632d370a34312dd8c90ac43be1656b6a"])
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000040)=0x10)
r1 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000002840)={'team0\x00', <r3=>0x0})
syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002880)={{{@in6=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@private0}}}, &(0x7f0000002980)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000002c40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002c00)={&(0x7f0000000940)={0x350, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r4}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x10c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r4}, {0xc8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x350}, 0x1, 0x0, 0x0, 0x44880}, 0x4)
ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0xfffffffffffff000)

05:54:51 executing program 5:
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x15, 0x101, 0x0, 0x1, 0x84, 0x1, 0xe66, [], 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x40)

05:54:51 executing program 4:
clock_gettime(0x2, 0x0)

05:54:51 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x800, 0x1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="7d752da598f3efb607ea35e13af23b0fe21a99432dc7360281fa8040808c5e1e856e0a8ee107bf4ef1308f61c11f8a4905d0c62d0b193de1402e890ca234d4b3668addd7dfc01c6990c96043296db0ff04b6bc2ca52f9051499f8acb24c0e4df7468dbcc80902ab477239af69f35fc1aa8d32b6a4a46b93e3c740440bad437c6a1146a2aef58cc3b17f9354c7a76dde975e7426322f9d1cca38306f94de7889808f1e1c58b72aa22797795146273c016b121a8c3183b82fd58e1689f1f487fa4a6bcb5c2675c07110862f3013aad59e129759d0e0c501bc64b11b79d7697a179a2a61c4cfbfee7c2e422ff69739d17", 0xef, 0x20}], 0x822000, &(0x7f0000000280)=ANY=[@ANYBLOB="2f6465762f627367002c5e252f1c7b5e5b2e402b2c2f6465762f627367002c2c2f6465762f627367002c61707072616973652c61707072616973652c726f6f74636f6e746578743d73797374656d5f752c00884430b2662bc35b496232770cfe8f27d80f05092bd4841f18911a4bd8ca"])
r0 = socket(0xc, 0x1, 0x8001)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000001880)=0xffff03ce, 0x4)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x400, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x10, r1, 0x8000000)

[ 2628.941557][T27823] loop1: detected capacity change from 8 to 0
[ 2629.023473][T27823] loop1: detected capacity change from 8 to 0
05:54:51 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x15, 0x101, 0x0, 0x1, 0x84, 0x1, 0xe66, [], 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x40)

05:54:51 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffc00}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8090}, 0x400)

05:54:51 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x410600, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000040)=0x3ff, 0x8)
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

05:54:51 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x2000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:51 executing program 2:
socket$inet_udp(0x2, 0x2, 0x0)
clock_gettime(0xd4e8863c12c8ef23, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000000)={0x9, 0x2, 0x4, 0x20, 0x5, {0x0, 0x2710}, {0x2, 0x8, 0x7f, 0x34, 0x7f, 0x9, "5a2dc579"}, 0x8, 0x3, @offset=0x3ff, 0x10000})

05:54:51 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)

05:54:51 executing program 3:
r0 = getpgrp(0xffffffffffffffff)
wait4(r0, 0x0, 0x0, 0x0)
move_pages(r0, 0xffffffffffffffd4, 0x0, 0x0, 0x0, 0x6)

05:54:51 executing program 5:
bpf$MAP_CREATE(0x0, 0x0, 0x0)

[ 2629.304269][T27851] loop1: detected capacity change from 16 to 0
05:54:52 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x4000009)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1})
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10)
clock_settime(0x7, &(0x7f0000000100)={0x0, 0x989680})
socket$inet6(0xa, 0x80000, 0x8)

05:54:52 executing program 2:
clock_gettime(0x4, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000000), 0x1, &(0x7f0000000040))
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f00000004c0)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000400)=""/191, 0xbf}], 0x2}, 0x10060)
r1 = msgget(0x0, 0x200)
msgctl$IPC_RMID(r1, 0x0)
msgctl$IPC_RMID(r1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="05000000000000000100000000000000000000000100000005000000000000000200000000000000050000000000000000000000aa930000ffffffff0800000000000000000000000008000000000000aa01000000000000ed000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000091c58bd2ac20a10739c028ddc004df92c2cf1b92ba06b8bf0e13a84e61f9dbea3cd10b310ed6e0dcf88afd7d0affa861c8342c5ec12b75a766f716d9ecbf9393c143d34e11a6240c23af4bdf5cad13e2ebff427af51de6"])
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'})

05:54:52 executing program 4:
clock_gettime(0x0, 0x0)

[ 2629.468047][T27851] loop1: detected capacity change from 16 to 0
05:54:52 executing program 5:
bpf$MAP_CREATE(0x0, 0x0, 0x0)

05:54:52 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x2010, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:52 executing program 4:
r0 = gettid()
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB='ip_vti0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=<r1=>0x0, @ANYBLOB="0080780000007fff80000001498200640066000059299078ffffffffac1414aa44041c932712544b9513f319000002e0000002ac947dd1df7a0c66b0b3db1bef4b441cf61712c1512232eb917f00000100000bf5ffffffff0000a4b60a01010200"]})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv0\x00'})
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f00000008c0)={0x1b4, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x150, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x86, 0x7f, 0x4, 0x1000}, {0x6, 0x7, 0x0, 0x3}, {0xe3b9, 0x6, 0x3}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000040}, 0xbc05947e32f84a3b)
clock_gettime(0xd4e8863c0000000b, 0x0)
r2 = getpgrp(0xffffffffffffffff)
ptrace(0x10, r0)
wait4(r2, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
rt_tgsigqueueinfo(0x0, r2, 0x22, &(0x7f0000000000)={0xa, 0x5, 0x80000001})

05:54:52 executing program 5:
bpf$MAP_CREATE(0x0, 0x0, 0x0)

05:54:52 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
set_tid_address(&(0x7f0000000000))
pselect6(0x40, &(0x7f0000000040)={0x9, 0x5, 0x40000000000, 0xfffffffffffffff7, 0x6, 0x1, 0x4, 0xc7}, &(0x7f0000000200)={0x5, 0x4, 0x7f, 0x6, 0x20, 0x100, 0x4, 0xf7f4}, &(0x7f00000000c0)={0x5, 0x184, 0x0, 0xfffffffffffffff8, 0xe58, 0x7, 0x7, 0x8000}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000080)={[0xfffffffd]}, 0x8})
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00')
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe978}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffafe0}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4)

05:54:52 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x7fffffff, 0x1, 0x3, "8b6a0656e90ea32f9a1694b3811fd01765f8df39a2f1a9e2ff7e9928de19aaa2", 0x38416761})
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0xd8040, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
r2 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x8000, 0x0)
ioctl$CAPI_INSTALLED(r2, 0x80024322)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4)

[ 2629.838908][T27884] loop1: detected capacity change from 16 to 0
[ 2629.961179][T27884] loop1: detected capacity change from 16 to 0
05:54:52 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0xb)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:52 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x0, 0x101, 0x0, 0x1, 0x84, 0x1, 0xe66, [], 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x40)

05:54:52 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000000c0)=0x3, 0x8)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x105000, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000380)=0x8001, 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000003c0), 0x8)
clock_gettime(0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x2, 0x2, 0x4, 0x1, 0x401, {r1, r2/1000+10000}, {0x1, 0x2, 0x90, 0xf6, 0x1, 0x1, "ae5d6701"}, 0x8001, 0x4, @userptr=0x3ff, 0x5})
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000100))
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000300)=0x73d9, 0x8)

05:54:52 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x1f, 0x32314752, 0x1, @discrete={0x100, 0xfffffffa}})

05:54:52 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x3f00, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:52 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@multicast1, @in6=@private2}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000000)=0xe8)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:52 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x84, 0x1, 0xe66, [], 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x40)

05:54:52 executing program 2:
times(&(0x7f0000000000))
clock_gettime(0x7, 0x0)
clock_settime(0x5, &(0x7f0000000040)={0x77359400})

05:54:52 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x101080, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1d, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xc35}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x994}, @generic={0x0, 0xc, 0xe, 0x4, 0x3}, @jmp={0x5, 0x1, 0x5, 0x7, 0x6, 0x50, 0x8}, @call={0x85, 0x0, 0x0, 0x2e}, @map={0x18, 0x2, 0x1, 0x0, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, [], 0x0, 0x1b, r0, 0x8, &(0x7f0000000100)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0x2, 0x7f, 0x1}, 0x10}, 0x78)

[ 2630.269438][T27914] loop1: detected capacity change from 31 to 0
05:54:52 executing program 3:
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in=@private, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in=@private}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r1=>0x0})
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, <r2=>0x0}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)=""/179, 0xb3}, {&(0x7f0000000300)=""/235, 0xeb}], 0x2}, 0x2000)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', <r3=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f00000005c0)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'batadv0\x00', <r6=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000840)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00', <r8=>0x0})
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000900)={0x0, @xdp={0x2c, 0x2, <r9=>0x0, 0x9}, @generic={0x25, "fc9a3a5a0565a18aca7ad09c0ca2"}, @qipcrtr={0x2a, 0x2, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)='bridge0\x00', 0x4, 0x6, 0x200})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'team0\x00', <r10=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000009c0)={{{@in6, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000ac0)=0xe8)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000f40)={0x0, @nfc={0x27, 0x0, 0x0, 0x2}, @xdp={0x2c, 0xd, <r12=>0x0, 0x2}, @ax25={0x3, @null, 0x5}, 0x9, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000f00)='veth1_vlan\x00', 0x6, 0x7, 0xde})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000fc0)={{{@in6=@ipv4={[], [], @initdev}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000010c0)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000001200)=0xe8)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000002080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002040)={&(0x7f0000001240)={0xdec, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x27}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r0}}}]}}, {{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x3b76722b}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x22c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r3}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x4f00}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x9d61}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x9a}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r10}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x44, 0x4, [{0xfe00, 0x7, 0x40}, {0x6, 0x0, 0x1f, 0x80000000}, {0x0, 0x6, 0xff, 0x2}, {0x1, 0x8, 0x21}, {0x4, 0xa6, 0x8b, 0xfffffffa}, {0x81, 0x0, 0xc1, 0x400}, {0xffed, 0x3f, 0x9f, 0x4}, {0x1ff, 0x5, 0x5d, 0x5}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0xdec}, 0x1, 0x0, 0x0, 0x8000}, 0x800)

[ 2630.365811][T27914] loop1: detected capacity change from 31 to 0
05:54:52 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x84, 0x1, 0xe66, [], 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x40)

05:54:53 executing program 4:
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000040)=0x8, 0x8)
clock_gettime(0xd4e8863c0000000b, 0x0)
clock_gettime(0x3, &(0x7f0000000000))

05:54:53 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:53 executing program 0:
socket$inet6(0xa, 0x3, 0x9)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000100)={0x4})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x78442, 0x0)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000180))
timer_delete(0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8)
setresuid(0xee00, 0x0, r3)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)

05:54:53 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)

05:54:53 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4, 0x800, 0x100, {}, {0x2, 0x8, 0xa4, 0x34, 0x6, 0x9, "2fda6f21"}, 0x0, 0x0, @offset=0x1, 0x8001, 0x0, r1})
clock_gettime(0xd4e8863c12c8ef23, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000003c0)={'batadv0\x00', <r3=>0x0})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x0, @xdp={0x2c, 0x4, r2}, @sco={0x1f, @none}, @xdp={0x2c, 0x3, r3, 0x1c}, 0x0, 0x0, 0x0, 0x0, 0x3e0, &(0x7f0000000400)='ipvlan1\x00', 0x10f3, 0x9, 0x3})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40881}, 0x48004)

05:54:53 executing program 3:
write$capi20(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x7, 0x84, 0x82, 0xe700, 0x9}, 0x10)

[ 2630.657708][T27947] loop1: detected capacity change from 32 to 0
05:54:53 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xe66, [], 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x40)

05:54:53 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = socket(0x27, 0x3, 0x7)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x1000, 0x4)

05:54:53 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000200)={0x1, @win={{0x1, 0x0, 0x8, 0x10000}, 0x8, 0x4de6, &(0x7f00000000c0)={{0x10000, 0x2b19, 0xff, 0xc9f1}, &(0x7f0000000040)={{0x6, 0x6cddeba1, 0x2, 0xffffff5a}, &(0x7f0000000000)={{0x0, 0x8, 0x8, 0x2}}}}, 0x5a2c, &(0x7f0000000100)="8b011da2bc0d5b9b46af2ba5ff1d3d05611a4200d543c32036420f3836ee11de5de64022b8678b0cabd46455d48b4049b6ac642d503d45277991b7ce75ccf9a8ecba427d8f9825c9ca0a901b7bc29275fa42308a149bd4b0ef77079b82a02abf605d5108a47eedfc973777ecc9981eabc9334eb49e4fda6b2924c715b2da78a8d306c5a80b363afcd61e363766df6bfca73802b6dd1f57a4f41043dbbd43398f8bafb13d906104bbb4aa92502114cf037793464781953ce4322e888a87cbb677edad4b508b953f58d20a5c8364497e5ca37d55bda5062f179f6b8309354cda1c313f6b5b96a142fc854a2d", 0x3}})
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/card0/oss_mixer\x00', 0x383040, 0x0)
ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f00000003c0))
write$proc_mixer(r1, &(0x7f0000000340)=[{'VOLUME', @void}, {'RECLEV', @val={' \'', 'Mic', '\' '}}, {'VIDEO', @val={' \'', 'Line', '\' '}}, {'DIGITAL3', @val={' \'', 'Capture', '\' '}}], 0x73)

[ 2630.755883][T27947] loop1: detected capacity change from 32 to 0
05:54:53 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
socket$inet6(0xa, 0x1, 0x7)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x8, 0x2, 0x2})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x280602, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)={0x98, 0x1, 0x4, 0xe000, 0x5, {0x0, 0xea60}, {0x2, 0x0, 0x3f, 0x1, 0x5, 0xeb, "1b27545c"}, 0x9, 0x3, @fd=r0, 0x2a2, 0x0, r0})

05:54:53 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xe66, [], 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x40)

05:54:53 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x4800, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:53 executing program 4:
clock_gettime(0x6, 0x0)

05:54:53 executing program 0:
socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0)

05:54:53 executing program 3:
r0 = gettid()
syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x2a140)
r1 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x200000)
ioctl$NBD_CLEAR_QUE(r1, 0xab05)
tgkill(r0, 0xffffffffffffffff, 0x13)
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4)

05:54:53 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xe66, [], 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x40)

[ 2631.057464][T27976] loop1: detected capacity change from 36 to 0
05:54:53 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="b9fe000000b800900000ba000000000f30b876f426b10f23c00f21f835020004000f23f866baf80cb8ccfe3080ef66bafc0cb804000000ef66b89d008ee866b8a6008ee8660ffebf9d940000f30fc736b805000000b98000c0fe0f01d9c4c255a66e0066baf80cb894648683ef66bafc0cb8e4130000ef", 0x77}], 0x1, 0x48, &(0x7f00000000c0)=[@flags={0x3, 0x10}, @dstype0={0x6, 0x1}], 0x2)
shmget(0x1, 0x4000, 0xf60, &(0x7f0000ffa000/0x4000)=nil)
gettid()
clock_gettime(0xd4e8863c0000000b, 0x0)

05:54:53 executing program 2:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
r0 = syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6, &(0x7f0000000440)=[{&(0x7f0000000080)="5f5f455704a15f5bee5e650642661ef36f8cdec2826a5d6abed00ee0f65e8b4cdb5c5a4d9e11535c39ceb04a3178eb631bcc01cd6aa91ac2afd05a501dc451d9482f629b29daf2880747d742543c8de4fdff2427277309bea01d2f401a113a51549f06e420df74eb6a6d979a47d0323771a9732a6dd0b0ade86e4b7dc56720daaa28f76737fc7c16450fcd1188d9aac4faa39c6a9936aab0481e74e05cce8570a9d9bd6a94432a96a1da877de0260d3d07262e1782d42d29af8b114da62c24b5", 0xc0, 0x100000000}, {&(0x7f0000000140)="681921e26d3ae0b570ffb3f51fdbaaa549cfe3a882b6fd4075b01f3a2cdec95c1dcac7e7e53595eb1977e66f5a78b5be0589e73ed0d3e67b8d511e9811fc38f6cc041881252d15a9d7046c5dd2cace5bab2d8ea1d1c9d5c76209164ee1e8e13170d5917c60cb3de089efe2bdf8a9692ad52114fa905718ee569a7a2a50ff3f0c3dcdf1f4c0963371f4792d681bd7cfaa43bb71a7d9635b993cf66c4e9d5fc2a9f2bb4bae97f9c4a2dd5d2bcc8f029a965a97cba36104d076c08c2fe7c5afd3e5947864c864fb2d43d806a4807ab645f9a5e0c212b86a571c40eb4a0a8317b77d24e572", 0xe3, 0x8}, {&(0x7f0000000240)="23ca0d1095b3dbd3386b20063b5da83f27f4a4caea502e7816cc17046270f065103afccec8e5e3235e7221bd3d2c282cf2964d35e5e9a215c3e54a750f7bbffa85f6e0167de98fa0ec2bdac1a03bea0d08dc079027cb860b4805bf5b903462e4425f495ca00132efcaa1797c401e84ff242aaa02a9e41ee93d307be9d500be4a7e326539a42259e6bbc754b5a7e1c474f3957b827b055258aa2b88525d9abae387f8a5b71023", 0xa6, 0x6a3}, {&(0x7f0000000300)="cfc776c52e0f4afed8c5cdd2e877ff79d7ac081d93b7d3b2aa39e3d521fc2afb3c20ec3c6846a4c8438fc4209d788ef7d802885ea440e495291a3d445da5742f7e7303be8cd0e735fea09c6757416812bd1441b8d4ad650083460f78331e39c6033ef97a034b761b099d5877e5d1d2acf7a451b3599bac3d7eedf2ae8a68", 0x7e, 0xbcd4}, {&(0x7f0000000380)="1de5b7e0c892c62840fe7e045d8272926bbb1ee838298ec92177b757710d80133818c8c6690290dc093040b3dcd3b2752974f7d22d8ec1", 0x37}, {&(0x7f00000003c0)="d137db5a32b11e37f4430654a8f3b30291c0e678294bb1de85ab102f96c1ed21cda0fceaa1c158abe34d0e3040818e39977afe6fceeaecd97c98f5ddaedd276c0a41dd892bcd9723aa509a95d2715b9eebd0a1", 0x53, 0x8000}], 0x1000000, &(0x7f0000000500)={[{'@{'}], [{@appraise_type='appraise_type=imasig'}, {@subj_role={'subj_role', 0x3d, '\x9f@'}}, {@subj_type={'subj_type', 0x3d, '*-+\'!'}}, {@fsmagic={'fsmagic', 0x3d, 0x1000}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}]})
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd, 0x9, {0x0, r0}, 0x4, 0x1, 0x1, {0x0, 0x0, r1}}, 0x8001)

05:54:53 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x84, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x40)

[ 2631.158950][T27976] loop1: detected capacity change from 36 to 0
05:54:53 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0xa0400, 0x0)
write$proc_mixer(r0, &(0x7f0000000140)=[{'DIGITAL3', @val={' \'', 'Master', '\' '}}, {'LINE2', @val={' \'', 'CD Capture', '\' '}}, {'LINE2', @val={' \'', 'Line Capture Switch', '\' '}}, {'LINE', @val={' \'', 'Capture Switch', '\' '}}, {'LINE2', @val={' \'', 'CD', '\' '}}], 0xcb)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x5, 0xfffffff9, 0x1, {0x1, @pix_mp={0x8000, 0x80000000, 0x32314d4e, 0x0, 0x7, [{0x7f}, {0x7f5c8379, 0x7337}, {0x10001, 0x8}, {0x1, 0x9}, {0x8, 0xfff}, {0x1000, 0x5}, {0x401, 0x1}, {0x62, 0x5}], 0x90, 0x9, 0xf, 0x2, 0x4}}, 0xffff7fff})
ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000080)={0x0, 0xfffffff7, 0x6, &(0x7f0000000040)=0x80})
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card3/oss_mixer\x00', 0x2, 0x0)
write$proc_mixer(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="4c494e453220274361707475726520566f6c756d65272030303030303030303030303030303030304b30300a414cef7c685450434d20274361707475726520566f6c6d65272030303030303030303030303030303030303030300a4c034e45310a535045414b455220274d617374657220506c61796261f46b20537769746368272030303030303030303030303030303030303030300a535045414b45520a4c494e45310a00"], 0xa3)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0)

05:54:53 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x4c00, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:53 executing program 2:
clock_gettime(0x5, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in=@multicast2, @in=@broadcast}}, {{@in6=@private1}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000140)=0xe8)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@broadcast, @in6=@dev}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000280)=0xe8)

05:54:53 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x0, 0x21e7, 0xd7, 0x4000})
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x10040, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf250100000005002e0001000000060028000100000005002f000100000008003c00d2000000"], 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x84)

05:54:53 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x84, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x40)

05:54:53 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000040)={0x0, 0x92, 0x2, &(0x7f0000000000)=0x1})

05:54:54 executing program 0:
socket$inet6(0xa, 0x3, 0x9)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2000, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x4a00, 0x0)
ioctl$CAPI_SET_FLAGS(r1, 0x80044324, &(0x7f0000000100)=0x1)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x1, 0x0)

[ 2631.521342][T28014] loop1: detected capacity change from 38 to 0
05:54:54 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x84, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x40)

[ 2631.582306][T28014] loop1: detected capacity change from 38 to 0
05:54:54 executing program 2:
clock_gettime(0x2, 0x0)

05:54:54 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
clock_gettime(0x2, &(0x7f0000000000))

05:54:54 executing program 3:
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f0000000040), 0x12)
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

05:54:54 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x84, 0x1, 0xe66, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40)

05:54:54 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x6800, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:54 executing program 0:
r0 = getpgrp(0xffffffffffffffff)
wait4(r0, 0x0, 0x0, 0x0)
r1 = getpgrp(0xffffffffffffffff)
wait4(r1, 0x0, 0x0, 0x0)
rt_tgsigqueueinfo(r0, r1, 0x12, &(0x7f0000000000)={0x36, 0x8000, 0xdd2})
r2 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
sync()

05:54:54 executing program 2:
clock_gettime(0x5, 0x0)

05:54:54 executing program 4:
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x1000)=nil, 0x1000}, 0x2})
clock_gettime(0xd4e8863c0000000b, 0x0)
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x100000001, 0x6, &(0x7f0000001380)=[{&(0x7f00000000c0)="bc49ae975ec1370a07ec500f32e120317b8caf9ce471d21c199f7be6e6783ade332063ff49e6e39360d149e0a309765185c85eb850f56567ad78713f566ad8eba91f9b1110ae4c822988336c96c1c07eb06297224d9d538cf68d963b620b4d572dc57ea3880f65a5dcc8274fb61dedaa741da7e6a1a815e23aed6cf5c8b341b4f1a39f8fa108b112d5cb5055f1", 0x8d, 0x3}, {&(0x7f0000000180)="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", 0x1000, 0x4}, {&(0x7f0000001180)="8969383a2cab0e4b0b05a03dfc1da30787df97911c3ad4d4088626d7afed8a6d44e328218a75406e308148216c910dcb9eeef222bf02d3028309069befe2cb0866d82362b4b2d4ea333ece4292c5194dd47c515d935e7a5c49bffdf7c64d032515f917eacf0ab0274690220816cee22f8a6f088ded8d40e0992ad4482c22cdd90d60ae434a", 0x85, 0x6}, {&(0x7f0000001240)="84e7540a6704b5ed0a53797d5fb7f49efe6cd74be9247d7206b83525ead01a537d89ee2928bb7872835c63600df401b1099c5f2062472ca345a536d6119525d943c5c2", 0x43, 0x8000}, {&(0x7f00000012c0)="62660ad7bfcedc6e44ac1ba38e148baa47fb2b5efc8e0480eecb4714caf94595bceb2149d7e2c59f0cb1a0dd819927d288016e1739f10cc8ee136bb22f2ba0e7a7fc8eb7fe0009e39ffd8c711f570fcc76ea51767cd06c047fe04748", 0x5c, 0x80}, {&(0x7f0000001340)="4d7d072fe2065242ad7e23b9a33c5baf4c6c640424abc01963", 0x19, 0x4}], 0x2000404, &(0x7f0000001440)={[{')\''}], [{@fowner_gt={'fowner>', 0xee01}}]})

05:54:54 executing program 3:
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f0000000040)=0x10)
r0 = gettid()
ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000080)=0x1ff)
write$capi20_data(0xffffffffffffffff, &(0x7f0000000200)={{0x10, 0x56, 0x84, 0x0, 0x9, 0xbf}, 0x54, "9708a391a8b2d822ede6400bd75475c9ff74c529c55510b94f423c96597cdf6e1adbaacc58103e0285e375da5a130c469d1c2fc1806759f1f3fa3f761f7a4c348f8fbc2943c09460ed517d040995b27e1a203e14"}, 0x66)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
bind$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x4000})
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil})
move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2631.894306][T28044] loop1: detected capacity change from 52 to 0
05:54:54 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x84, 0x1, 0xe66}, 0x40)

05:54:54 executing program 0:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x0, [0x6, 0x100, 0x4, 0x1, 0x5, 0x101, 0x4, 0x6, 0xffff, 0x5, 0x5999, 0x0, 0x5, 0x7, 0x6, 0xfff, 0x1, 0xa, 0xa000, 0x7, 0x5, 0x7, 0x88, 0x65, 0x4, 0x888, 0x9, 0x1ff, 0x4, 0x26, 0x521f, 0x671, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x1, 0xfff0, 0xe79a, 0x800, 0xf76f, 0x5, 0x9, 0x2], 0x1000}})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2})
ioctl$CAPI_NCCI_GETUNIT(r2, 0x80044327, &(0x7f0000000080)=0x5)
setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000380), 0x4)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000140))
timer_delete(0x0)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000001c0))
openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0)

[ 2632.005478][T28044] loop1: detected capacity change from 52 to 0
05:54:54 executing program 2:
ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x200002, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
socket$can_raw(0x1d, 0x3, 0x1)
clock_gettime(0xd4e8863c12c8ef23, 0x0)
clock_settime(0x6, &(0x7f0000000040)={0x77359400})
recvmsg$can_bcm(r0, &(0x7f0000000780)={&(0x7f0000000540)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/31, 0x1f}, {&(0x7f0000000600)=""/18, 0x12}, {&(0x7f0000000640)=""/93, 0x5d}], 0x3, &(0x7f0000000700)=""/107, 0x6b}, 0x10000)
sendto$rose(r1, &(0x7f00000007c0)="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", 0x1000, 0x14, &(0x7f00000017c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c)
r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000140))

[ 2632.053742][T28056] loop4: detected capacity change from 264192 to 0
[ 2632.097366][T28056] cramfs: Unknown parameter ')''
05:54:54 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x6c00, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:54 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
write$tcp_mem(r0, &(0x7f0000000000)={0x2, 0x20, 0x0, 0x20, 0xfffffffffffffb6b}, 0x48)
r1 = getpgrp(0x0)
move_pages(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

05:54:54 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x84, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x40)

05:54:54 executing program 2:
ioctl$CAPI_INSTALLED(0xffffffffffffffff, 0x80024322)
ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000080)=0x5)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x800, 0x0)
write$capi20(r0, &(0x7f0000000040)={0x10, 0x8, 0x86, 0x83, 0x200, 0x5}, 0x10)

05:54:54 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x4)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6, 0x11, 0xffffffffffffffff, 0x100000000)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x2})
ioctl$CAPI_NCCI_OPENCOUNT(0xffffffffffffffff, 0x80044326, &(0x7f0000000040)=0x5)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x3, @sliced={0x4, [0xbd6, 0x7, 0x344c, 0x800, 0x8fd0, 0x0, 0x9, 0x9, 0x7ff, 0x5, 0x7fff, 0x3, 0x0, 0x8, 0x8, 0xffff, 0x9, 0x3, 0x8001, 0x5, 0x1f, 0x9, 0x80da, 0x7, 0x7, 0x1, 0x6, 0x80, 0x3, 0xe5, 0x0, 0x5, 0x7f, 0x7, 0x40, 0x2d, 0x1, 0x6, 0x20, 0x0, 0x5, 0x9, 0x9fab, 0xdd, 0xfffa, 0x2a85, 0x7f, 0x800], 0x3}})

[ 2632.279220][T28071] loop4: detected capacity change from 264192 to 0
[ 2632.305403][T28071] cramfs: Unknown parameter ')''
05:54:54 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x0, [0x6, 0x100, 0x4, 0x1, 0x5, 0x101, 0x4, 0x6, 0xffff, 0x5, 0x5999, 0x0, 0x5, 0x7, 0x6, 0xfff, 0x1, 0xa, 0xa000, 0x7, 0x5, 0x7, 0x88, 0x65, 0x4, 0x888, 0x9, 0x1ff, 0x4, 0x26, 0x521f, 0x671, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x1, 0xfff0, 0xe79a, 0x800, 0xf76f, 0x5, 0x9, 0x2], 0x1000}})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2})
ioctl$CAPI_NCCI_GETUNIT(r2, 0x80044327, &(0x7f0000000080)=0x5)
setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000380), 0x4)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000140))
timer_delete(0x0)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000001c0))
openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0)

[ 2632.370386][T28080] loop1: detected capacity change from 54 to 0
05:54:54 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x401, 0x2)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100))
r2 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x2)
ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f00000000c0))
mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000f, 0x10, r0, 0x0)

05:54:55 executing program 4:
clock_gettime(0x7, 0x0)
r0 = getpgrp(0xffffffffffffffff)
syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x200080)
syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x280)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x200400, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x1)
wait4(r0, 0x0, 0x0, 0x0)
rt_tgsigqueueinfo(r0, r0, 0x40, &(0x7f0000000000)={0x1a, 0x5, 0xf6})

[ 2632.538387][T28080] loop1: detected capacity change from 54 to 0
05:54:55 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = userfaultfd(0x80800)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
rt_sigpending(&(0x7f0000000240), 0x8)
getresgid(&(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180))
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@private0, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0}}, {{@in6=@private2}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8)
setuid(r3)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="677265746170300000000000000000009bf3c5b28fec6fbae3fe5330ea39368f81be2c2c4c2924ad40b649685ff8949587f7402fffae4d81b6c685276de7e05e4feabbd8", @ANYRES32=r2, @ANYBLOB="00080008000001ff0000000440080040006700000704907864010102ac1414bb442c8fe00000000700000007000004000000040000007fff000a000000000000000000070001000000000080"]})

05:54:55 executing program 2:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10)
bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10)
clock_gettime(0xd4e8863c12c8ef23, 0x0)

05:54:55 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x7400, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:55 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
times(&(0x7f0000000000))

05:54:55 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x0, [0x6, 0x100, 0x4, 0x1, 0x5, 0x101, 0x4, 0x6, 0xffff, 0x5, 0x5999, 0x0, 0x5, 0x7, 0x6, 0xfff, 0x1, 0xa, 0xa000, 0x7, 0x5, 0x7, 0x88, 0x65, 0x4, 0x888, 0x9, 0x1ff, 0x4, 0x26, 0x521f, 0x671, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x1, 0xfff0, 0xe79a, 0x800, 0xf76f, 0x5, 0x9, 0x2], 0x1000}})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2})
ioctl$CAPI_NCCI_GETUNIT(r2, 0x80044327, &(0x7f0000000080)=0x5)
setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000380), 0x4)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000140))
timer_delete(0x0)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000001c0))
openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0)

[ 2632.744981][T28105] loop1: detected capacity change from 58 to 0
05:54:55 executing program 4:
clock_getres(0x4, &(0x7f0000000000))
clock_gettime(0x7, 0x0)

[ 2632.841345][T28105] loop1: detected capacity change from 58 to 0
05:54:55 executing program 2:
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000025c0)={'gre0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="65727370616e30000000000000000000b8331723db60", @ANYRES32=<r0=>0x0, @ANYBLOB="00070020000000800000000847e0001c0068000006049078ac1e0101000022199404010001000000"]})
bind$can_raw(0xffffffffffffffff, &(0x7f0000002600)={0x1d, r0}, 0x10)
clock_gettime(0x4, 0x0)

05:54:55 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x7a00, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:55 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x0, [0x6, 0x100, 0x4, 0x1, 0x5, 0x101, 0x4, 0x6, 0xffff, 0x5, 0x5999, 0x0, 0x5, 0x7, 0x6, 0xfff, 0x1, 0xa, 0xa000, 0x7, 0x5, 0x7, 0x88, 0x65, 0x4, 0x888, 0x9, 0x1ff, 0x4, 0x26, 0x521f, 0x671, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x1, 0xfff0, 0xe79a, 0x800, 0xf76f, 0x5, 0x9, 0x2], 0x1000}})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2})
ioctl$CAPI_NCCI_GETUNIT(r2, 0x80044327, &(0x7f0000000080)=0x5)
setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000380), 0x4)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000140))
timer_delete(0x0)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000001c0))
openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0)

05:54:55 executing program 0:
socket$inet6(0xa, 0x3, 0x9)

05:54:55 executing program 4:
sync()
clock_gettime(0x1, 0x0)

05:54:55 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
msgrcv(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000009d5a9624dbe0afe74165881f9ef2c6030000000000000000000000000000000000000000000000000000000096ef000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff0000000000000000000000000000000000000004000000000000000000"], 0x90, 0x3, 0x800)
r0 = gettid()
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r0, 0x12)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000001c0)={0x1, @win={{0x6, 0x10000001, 0x4, 0x2}, 0x1, 0x4e, &(0x7f00000000c0)={{0x1, 0x8, 0x81, 0x7f}, &(0x7f0000000080)={{0x10001, 0x3, 0x79, 0x1d122c43}, &(0x7f0000000040)={{0x2, 0x1, 0x5}}}}, 0x1, &(0x7f0000000380)="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", 0xdf}})
r1 = getpgrp(r0)
rt_sigqueueinfo(r1, 0x22, &(0x7f0000000100)={0x2d, 0x20})

05:54:55 executing program 2:
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x4, <r0=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000100)={0x0, 0x1c2c, 0xa61, &(0x7f00000000c0)=0x4})
clock_gettime(0xd4e8863c12c8ef23, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000240)="0f37c4c291a8fac4e2158c13660f38807cc705360f220466baf80cb8e434068def66bafc0cb0f4eec4e36538f5670f0178000f005a00c4c17fe67e00", 0x3c}], 0x1, 0x2, &(0x7f00000002c0)=[@vmwrite={0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}], 0x1)
sendto$rose(0xffffffffffffffff, &(0x7f0000000140)="f2e3b979b739db4be49b65dc291e607c54f53d9c5c29503460c5ba342d983b78d1f6ea5f9b959d2e3d3d43f4be5b6d0054d03f7ab2c693e02924724d56a780bbb4cf3e439e12a4dd7bcc19cc02b4154badee2cfce36027d407076e2264a2e26ba80743da9eb0fd2b04341850482e360f2a4815bbdf54f36f9c8f70f23e2871361cd97c50cce67d18921ee427c03c32b4dc5559510036fd41610a3e05271a57b8b01d35bb500d7c7a6bf2cb05c73bbeb300a0c47f4d447e236d13d6203992c678ad317ba371a4a4cd261026", 0xcb, 0x44000, 0x0, 0x0)
setitimer(0x1, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000040))

05:54:55 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x1})

[ 2633.208855][T28141] loop1: detected capacity change from 61 to 0
05:54:55 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x0, [0x6, 0x100, 0x4, 0x1, 0x5, 0x101, 0x4, 0x6, 0xffff, 0x5, 0x5999, 0x0, 0x5, 0x7, 0x6, 0xfff, 0x1, 0xa, 0xa000, 0x7, 0x5, 0x7, 0x88, 0x65, 0x4, 0x888, 0x9, 0x1ff, 0x4, 0x26, 0x521f, 0x671, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x1, 0xfff0, 0xe79a, 0x800, 0xf76f, 0x5, 0x9, 0x2], 0x1000}})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2})
ioctl$CAPI_NCCI_GETUNIT(r2, 0x80044327, &(0x7f0000000080)=0x5)
setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000380), 0x4)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000140))
timer_delete(0x0)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000001c0))

05:54:55 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5)

[ 2633.306695][T28141] loop1: detected capacity change from 61 to 0
05:54:55 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
write$nbd(0xffffffffffffffff, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x4, 0x4, "ddf1f941b676a7dc812528d213bfb4e527158a864a82f286339e30fd71c069a76831b0b46aa17d4f7acff6f433d4a0384998c3b2ebdd42fd4a6ee88e23179cc7e3ba9003a968b21db029df1a6bc1316dd62d900ce3cd192b19cf63c0210fc61084e7e0cdbd2507d79177aa7cf22c75552144ff82752c65d57881f81a1e9a8d9c140f17873d1b5c04318894d8af73a51e24ce69a5a03d2955a5a19c1074011b4b3ce768533b1efb712a88e3130e823e8183416763bb00859bdb77a92d34657af7c08f0ded47a33f70"}, 0xd8)

05:54:55 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xedc0, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:56 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0xd)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000000)=0x2)

05:54:56 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x6, 0x0, &(0x7f00000001c0), 0xe90c8, &(0x7f0000000680)={[], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_hash='dont_hash'}, {@audit='audit'}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@uid_lt={'uid<'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'9\xdf+\x00'}}, {@fsname={'fsname', 0x3d, '#'}}, {@smackfsroot={'smackfsroot'}}, {@fsname={'fsname', 0x3d, '\'9\xdf+\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}]})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bsg\x00', 0x200042, 0x0)
recvmsg$can_bcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)=""/108, 0x6c}, {&(0x7f00000003c0)=""/87, 0x57}, {&(0x7f0000000440)=""/165, 0xa5}], 0x3, &(0x7f0000000540)=""/119, 0x77}, 0x26)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000002c0)=@v2={0x2, @adiantum, 0x8, [], @d='~\xb8\n\xf3\xf2N\xf0\x86rjL\xea:\x15L\xe0'})

05:54:56 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x0, [0x6, 0x100, 0x4, 0x1, 0x5, 0x101, 0x4, 0x6, 0xffff, 0x5, 0x5999, 0x0, 0x5, 0x7, 0x6, 0xfff, 0x1, 0xa, 0xa000, 0x7, 0x5, 0x7, 0x88, 0x65, 0x4, 0x888, 0x9, 0x1ff, 0x4, 0x26, 0x521f, 0x671, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x1, 0xfff0, 0xe79a, 0x800, 0xf76f, 0x5, 0x9, 0x2], 0x1000}})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2})
ioctl$CAPI_NCCI_GETUNIT(r2, 0x80044327, &(0x7f0000000080)=0x5)
setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000380), 0x4)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000140))
timer_delete(0x0)

05:54:56 executing program 2:
ioctl$CAPI_SET_FLAGS(0xffffffffffffffff, 0x80044324, &(0x7f0000000000))
clock_gettime(0xd4e8863c12c8ef23, 0x0)

05:54:56 executing program 4:
r0 = gettid()
move_pages(r0, 0x7, &(0x7f0000000000)=[&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x5000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x6)

[ 2633.684178][T28167] loop1: detected capacity change from 118 to 0
05:54:56 executing program 2:
clock_gettime(0x3, 0x0)

05:54:56 executing program 2:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x7a00, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

[ 2633.866300][T28167] loop1: detected capacity change from 118 to 0
05:54:56 executing program 2:
sync()
clock_gettime(0x1, 0x0)

05:54:56 executing program 0:
r0 = socket$inet6(0xa, 0x80000, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
ioctl$CAPI_INSTALLED(0xffffffffffffffff, 0x80024322)

05:54:56 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000000))
socket$inet_smc(0x2b, 0x1, 0x0)

05:54:56 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x0, [0x6, 0x100, 0x4, 0x1, 0x5, 0x101, 0x4, 0x6, 0xffff, 0x5, 0x5999, 0x0, 0x5, 0x7, 0x6, 0xfff, 0x1, 0xa, 0xa000, 0x7, 0x5, 0x7, 0x88, 0x65, 0x4, 0x888, 0x9, 0x1ff, 0x4, 0x26, 0x521f, 0x671, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x1, 0xfff0, 0xe79a, 0x800, 0xf76f, 0x5, 0x9, 0x2], 0x1000}})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2})
ioctl$CAPI_NCCI_GETUNIT(r2, 0x80044327, &(0x7f0000000080)=0x5)
setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000380), 0x4)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000140))

05:54:56 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xfeff, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:56 executing program 3:
r0 = gettid()
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6)
ptrace(0x10, r0)
socket$inet(0x2, 0x4, 0x7)

05:54:56 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x0, [0x6, 0x100, 0x4, 0x1, 0x5, 0x101, 0x4, 0x6, 0xffff, 0x5, 0x5999, 0x0, 0x5, 0x7, 0x6, 0xfff, 0x1, 0xa, 0xa000, 0x7, 0x5, 0x7, 0x88, 0x65, 0x4, 0x888, 0x9, 0x1ff, 0x4, 0x26, 0x521f, 0x671, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x1, 0xfff0, 0xe79a, 0x800, 0xf76f, 0x5, 0x9, 0x2], 0x1000}})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2})
ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f0000000080)=0x5)
setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000380), 0x4)

[ 2634.200550][T28210] loop1: detected capacity change from 127 to 0
05:54:56 executing program 2:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x6, 0x0, &(0x7f00000001c0), 0xe90c8, &(0x7f0000000680)={[], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_hash='dont_hash'}, {@audit='audit'}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@uid_lt={'uid<'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'9\xdf+\x00'}}, {@fsname={'fsname', 0x3d, '#'}}, {@smackfsroot={'smackfsroot'}}, {@fsname={'fsname', 0x3d, '\'9\xdf+\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}]})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bsg\x00', 0x200042, 0x0)
recvmsg$can_bcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)=""/108, 0x6c}, {&(0x7f00000003c0)=""/87, 0x57}, {&(0x7f0000000440)=""/165, 0xa5}], 0x3, &(0x7f0000000540)=""/119, 0x77}, 0x26)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000002c0)=@v2={0x2, @adiantum, 0x8, [], @d='~\xb8\n\xf3\xf2N\xf0\x86rjL\xea:\x15L\xe0'})

05:54:56 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x4c0202, 0x0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fddb000005002a00000080000500370000000000050035000300000008002c000000010008002c000104000008003c000600000005d106a13499f735b39603cff9e0e377e4a2a9ac8b0adf0e2a6ae9bf2c1ab7b8703c5c295e65573e6cc6c4"], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x14)

05:54:56 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2634.358263][T28210] loop1: detected capacity change from 127 to 0
05:54:57 executing program 2:
clock_getres(0x4, &(0x7f0000000000))
clock_gettime(0x7, 0x0)

05:54:57 executing program 4:
clock_gettime(0x4, 0x0)

05:54:57 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xff00, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:57 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
times(&(0x7f0000000000))
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000000c0))

05:54:57 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x0, [0x6, 0x100, 0x4, 0x1, 0x5, 0x101, 0x4, 0x6, 0xffff, 0x5, 0x5999, 0x0, 0x5, 0x7, 0x6, 0xfff, 0x1, 0xa, 0xa000, 0x7, 0x5, 0x7, 0x88, 0x65, 0x4, 0x888, 0x9, 0x1ff, 0x4, 0x26, 0x521f, 0x671, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x1, 0xfff0, 0xe79a, 0x800, 0xf76f, 0x5, 0x9, 0x2], 0x1000}})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2})
setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000380), 0x4)

05:54:57 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000))
ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000040)={0x5, 0x13c})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)

05:54:57 executing program 2:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x401, 0x2)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100))
r2 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x2)
ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f00000000c0))
mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000f, 0x10, r0, 0x0)

05:54:57 executing program 4:
clock_gettime(0x7, 0x0)
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
clock_settime(0x1, &(0x7f0000000040)={r0, r1+60000000})

[ 2634.678073][T28244] loop1: detected capacity change from 127 to 0
05:54:57 executing program 2:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x0, [0x6, 0x100, 0x4, 0x1, 0x5, 0x101, 0x4, 0x6, 0xffff, 0x5, 0x5999, 0x0, 0x5, 0x7, 0x6, 0xfff, 0x1, 0xa, 0xa000, 0x7, 0x5, 0x7, 0x88, 0x65, 0x4, 0x888, 0x9, 0x1ff, 0x4, 0x26, 0x521f, 0x671, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x1, 0xfff0, 0xe79a, 0x800, 0xf76f, 0x5, 0x9, 0x2], 0x1000}})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2})
ioctl$CAPI_NCCI_GETUNIT(r2, 0x80044327, &(0x7f0000000080)=0x5)
setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000380), 0x4)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000140))
timer_delete(0x0)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000001c0))
openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0)

05:54:57 executing program 0:
ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000500)={0x0, 0x0, 0x101, &(0x7f00000004c0)=0x10000})
socket$inet6(0xa, 0x3, 0x9)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$NBD_CLEAR_SOCK(r0, 0xab04)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c40183d", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fddbdf250200000005002d000100000008003b0081ffffff0500300001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x4)
sendto$rose(0xffffffffffffffff, &(0x7f0000000380)="f471fac80c7358d9581144d1f432ec72e183d732c4cff4496fad2c1862e3ff1d222e935457784e4d06ad299daeccaa143465d09f496bf112db5340873a8da8b84a9bc979465d000ee08a4a124413305ec910ad7e09df4e8e72590206a3d0f5dbb6c2b448610248bfb486cd0058394576c3d1286dda352fa9ceb10f11bd19ecd9b8d25790cdacb76634749671f671ef59087f1638c9a1cee2e92a53a09c0b57b0ec4f193e5fa70855b2b39766986912f3d970d12c5fdd476eccbdfe574b7792ae1971c714484b", 0xc6, 0x404c000, &(0x7f0000000480)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c)
msgctl$MSG_INFO(0xffffffffffffffff, 0xc, &(0x7f0000000180)=""/234)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400cd88e3e1ff464e5b46bb0000e2753c9fd642b678aa2eaf025552334710c87729644af3708a11788e3a15029f00730e96f1abf76eb6ed3180d42fb2f89df7fcb69b0710a695da163701555fae3e74f1c0d682b90e7efb0f3d829df5b8303a9a9afaea08bbb704b9f93c1ff03071218d847684a76ea6f6188bcc1f33358f1f2ae111", @ANYRES16=0x0, @ANYBLOB="00022cbd70f7ffdbdffc10981ed5e3af7a0dde8932fad0250e000000"], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x8000)
openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

[ 2634.772921][T28244] loop1: detected capacity change from 127 to 0
05:54:57 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xfffe, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:57 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x0, [0x6, 0x100, 0x4, 0x1, 0x5, 0x101, 0x4, 0x6, 0xffff, 0x5, 0x5999, 0x0, 0x5, 0x7, 0x6, 0xfff, 0x1, 0xa, 0xa000, 0x7, 0x5, 0x7, 0x88, 0x65, 0x4, 0x888, 0x9, 0x1ff, 0x4, 0x26, 0x521f, 0x671, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x1, 0xfff0, 0xe79a, 0x800, 0xf76f, 0x5, 0x9, 0x2], 0x1000}})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000380), 0x4)

05:54:57 executing program 3:
r0 = getpgrp(0xffffffffffffffff)
wait4(r0, 0x0, 0x0, 0x0)
r1 = getpgrp(0xffffffffffffffff)
wait4(r1, 0x0, 0x0, 0x0)
getpgrp(r1)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000000)=0x7, 0x8)
r2 = getpgrp(0xffffffffffffffff)
r3 = msgget$private(0x0, 0x21)
msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000040)=""/83)
wait4(r2, 0x0, 0x0, 0x0)
r4 = getpgrp(0xffffffffffffffff)
wait4(r4, 0x0, 0x0, 0x0)
gettid()
getpgrp(0xffffffffffffffff)
r5 = getpgrp(0xffffffffffffffff)
wait4(r5, 0x0, 0x0, 0x0)
r6 = getpgrp(r5)
wait4(r6, 0x0, 0x0, 0x0)
ptrace(0xffffffffffffffff, r6)

05:54:57 executing program 4:
clock_gettime(0x2, 0x0)
r0 = msgget$private(0x0, 0x457)
syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x111200)
msgsnd(r0, &(0x7f0000000000)={0x3, "c28c4e193dd9f21a5cc9f3d566b3247b42061c55bae2700222f51c3d08f74727640b533be3c35b6c1bb807f8669891512fd4cfaa936f2cff69f685978ace42d31061ec09fa0299e9b13bc6381a03eac8f403140bcc3abb14b3aca6a34baf4658065ad25a4d620baa5790728688e01e5789c912b13f54abb570278048633e4c638c575388463066b112386d161636b54371b608b5647d70b4d3041cc7a4860e7a6324df485ea93226e557b7589f4f3924db46c65d830068cea9e3926d73c80d6ba628cac421f5f778f1f1131abe201f06f0415c00528516dad231c7b3e9cd36412a033b009ce3f1a632ccd5"}, 0xf3, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000100)=0x2, 0x4)

05:54:57 executing program 2:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x0, [0x6, 0x100, 0x4, 0x1, 0x5, 0x101, 0x4, 0x6, 0xffff, 0x5, 0x5999, 0x0, 0x5, 0x7, 0x6, 0xfff, 0x1, 0xa, 0xa000, 0x7, 0x5, 0x7, 0x88, 0x65, 0x4, 0x888, 0x9, 0x1ff, 0x4, 0x26, 0x521f, 0x671, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x1, 0xfff0, 0xe79a, 0x800, 0xf76f, 0x5, 0x9, 0x2], 0x1000}})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2})
ioctl$CAPI_NCCI_GETUNIT(r2, 0x80044327, &(0x7f0000000080)=0x5)
setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000380), 0x4)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000140))
timer_delete(0x0)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000001c0))
openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0)

[ 2635.024871][T28271] loop1: detected capacity change from 127 to 0
05:54:57 executing program 0:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8, 0x101400)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
prctl$PR_CAPBSET_DROP(0x18, 0x1f)

05:54:57 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x0, [0x6, 0x100, 0x4, 0x1, 0x5, 0x101, 0x4, 0x6, 0xffff, 0x5, 0x5999, 0x0, 0x5, 0x7, 0x6, 0xfff, 0x1, 0xa, 0xa000, 0x7, 0x5, 0x7, 0x88, 0x65, 0x4, 0x888, 0x9, 0x1ff, 0x4, 0x26, 0x521f, 0x671, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x1, 0xfff0, 0xe79a, 0x800, 0xf76f, 0x5, 0x9, 0x2], 0x1000}})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000380), 0x4)

[ 2635.122126][T28271] loop1: detected capacity change from 127 to 0
05:54:57 executing program 3:
r0 = socket(0x29, 0x80000, 0x800)
ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)="a915efdb913e296cc27a9528cf81169e638d2c5160a7905a5e8a997e3dfa3b57bd842d7955f03817b973281c0f9fc32b30ca08896724f78a127079d51633aaea6222ea7c4c6fbe5b174fcbb8cc1c1d88f98085f212e46a676ca61a0ac90c0b1f4fdd91c8e9e53d9c6c22fee778cd41af4c789963823b5913fa496426e93b40c9fb5e745a2c301d57bce967de4644531094c21cbdabd0f0452d8ba2c8866946f6b553c577d31e205b1107c1f4e04ac28c39ad975db440fde1bf046507176f")
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xaa, 0x40)
mmap$snddsp_control(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x8010, r1, 0x83000000)

05:54:57 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
clock_settime(0x5, &(0x7f0000000040)={0x0, 0x989680})
pselect6(0x40, &(0x7f0000000080)={0x2, 0xca0, 0xfffffffffffffff9, 0x0, 0xffff, 0x3, 0x1423, 0x6}, &(0x7f00000000c0)={0x865a, 0x8, 0x5be43ad7, 0x0, 0x10000, 0x4, 0x8a6, 0x40}, &(0x7f0000000100)={0xde2c, 0x3, 0x4, 0x1, 0x3, 0x6, 0x9, 0x2}, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x9]}, 0x8})
r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x12, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0xc, 0x1}, 0x8001)

05:54:57 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x20000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:57 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r1 = getpgrp(0xffffffffffffffff)
wait4(r1, 0x0, 0x0, 0x0)
r2 = getpgrp(0xffffffffffffffff)
wait4(r2, 0x0, 0x0, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x2, 0xee00, 0x0, 0x0, 0xee00, 0x2, 0x2}, 0x0, 0x0, 0x1ff, 0x7fff, 0x5, 0x10000, 0x278, 0x20, 0x7, 0x7936, r1, r2})
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f00000000c0)={0x3, @pix={0x3, 0x4, 0x32315559, 0x5, 0xe86a, 0x5, 0x1, 0x9, 0x1, 0x0, 0x2, 0x2}})

05:54:57 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x0, [0x6, 0x100, 0x4, 0x1, 0x5, 0x101, 0x4, 0x6, 0xffff, 0x5, 0x5999, 0x0, 0x5, 0x7, 0x6, 0xfff, 0x1, 0xa, 0xa000, 0x7, 0x5, 0x7, 0x88, 0x65, 0x4, 0x888, 0x9, 0x1ff, 0x4, 0x26, 0x521f, 0x671, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x1, 0xfff0, 0xe79a, 0x800, 0xf76f, 0x5, 0x9, 0x2], 0x1000}})
setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000380), 0x4)

05:54:57 executing program 2:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x0, [0x6, 0x100, 0x4, 0x1, 0x5, 0x101, 0x4, 0x6, 0xffff, 0x5, 0x5999, 0x0, 0x5, 0x7, 0x6, 0xfff, 0x1, 0xa, 0xa000, 0x7, 0x5, 0x7, 0x88, 0x65, 0x4, 0x888, 0x9, 0x1ff, 0x4, 0x26, 0x521f, 0x671, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x1, 0xfff0, 0xe79a, 0x800, 0xf76f, 0x5, 0x9, 0x2], 0x1000}})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2})
ioctl$CAPI_NCCI_GETUNIT(r2, 0x80044327, &(0x7f0000000080)=0x5)
setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000380), 0x4)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000140))
timer_delete(0x0)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000001c0))
openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0)

05:54:57 executing program 4:
ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000000)={0x0, 0x2, 0x4, 0x100000, 0x7f, {}, {0x5, 0x0, 0x4, 0xb9, 0x4, 0x1f, "7f05bc6c"}, 0xfffffffc, 0x2})

05:54:58 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
times(&(0x7f0000000000))
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x32, 0x2ef})

[ 2635.416885][T28300] loop1: detected capacity change from 256 to 0
[ 2635.551137][T28300] loop1: detected capacity change from 256 to 0
05:54:58 executing program 2:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x0, [0x6, 0x100, 0x4, 0x1, 0x5, 0x101, 0x4, 0x6, 0xffff, 0x5, 0x5999, 0x0, 0x5, 0x7, 0x6, 0xfff, 0x1, 0xa, 0xa000, 0x7, 0x5, 0x7, 0x88, 0x65, 0x4, 0x888, 0x9, 0x1ff, 0x4, 0x26, 0x521f, 0x671, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x1, 0xfff0, 0xe79a, 0x800, 0xf76f, 0x5, 0x9, 0x2], 0x1000}})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2})
ioctl$CAPI_NCCI_GETUNIT(r2, 0x80044327, &(0x7f0000000080)=0x5)
setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000380), 0x4)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000140))
timer_delete(0x0)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000001c0))

05:54:58 executing program 0:
socket$inet6(0xa, 0x3, 0x9)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
read$proc_mixer(0xffffffffffffffff, &(0x7f0000000100)=""/164, 0xa4)

05:54:58 executing program 4:
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in6=@private2}, 0x0, @in=@empty}}, &(0x7f0000000300)=0xe8)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x254, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r0}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xd1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8}, {0x10c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xff800000}}, {0x8}}}]}}]}, 0x254}}, 0x4)
clock_gettime(0xd4e8863c0000000b, 0x0)
clock_gettime(0x6, &(0x7f00000000c0)={<r1=>0x0, <r2=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x1, 0x1, 0x7, 0x2, 0x2, 0x9, 0x9, 0x7}, &(0x7f0000000040)={0xa79e, 0x7, 0x5710, 0x4, 0x1, 0x798a, 0x2, 0x1d}, &(0x7f0000000080)={0x7, 0x4, 0x80000000, 0x2, 0x0, 0x5, 0x3, 0x40}, &(0x7f0000000100)={r1, r2+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3]}, 0x8})
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000680)=0x2, 0x4)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000640)={0x1f, 0x2, 0x1}, 0x6)

05:54:58 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x0, [0x6, 0x100, 0x4, 0x1, 0x5, 0x101, 0x4, 0x6, 0xffff, 0x5, 0x5999, 0x0, 0x5, 0x7, 0x6, 0xfff, 0x1, 0xa, 0xa000, 0x7, 0x5, 0x7, 0x88, 0x65, 0x4, 0x888, 0x9, 0x1ff, 0x4, 0x26, 0x521f, 0x671, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x1, 0xfff0, 0xe79a, 0x800, 0xf76f, 0x5, 0x9, 0x2], 0x1000}})
setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000380), 0x4)

05:54:58 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x1000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:58 executing program 3:
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x1, 0x400000)
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x102c0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x480, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00')
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="24800000", @ANYRES16=r2, @ANYBLOB="02002abd7000fbdbdf2501000000050035000800000008000b0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x41)
setitimer(0x2, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000040))
userfaultfd(0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00')
timer_getoverrun(0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
sendto$rose(r3, &(0x7f00000002c0)="75eb7a22bcde420b91ff99", 0xb, 0x4000000, &(0x7f0000000300)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000380)={0x7ff, 0x8, 0x4, 0x8, 0xf1b, {}, {0x1, 0x3, 0x81, 0x62, 0xc1, 0x0, "5d8ebf98"}, 0x5c3, 0x3, @offset=0x8, 0xff, 0x0, <r4=>r1})
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000400)={0x5, 0xb, 0x4, 0xe000, 0x4, {0x0, 0x2710}, {0x5, 0x0, 0x5, 0x1, 0x7f, 0x99, "e826faff"}, 0x1, 0x3, @planes=&(0x7f0000000340)={0x8, 0x4d, @userptr=0x7f, 0x8}, 0x8, 0x0, r4})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000480)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2})

05:54:58 executing program 4:
r0 = msgget(0x3, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f}, [@jmp={0x5, 0x0, 0x3, 0x2, 0x1, 0xc, 0x1}]}, &(0x7f0000000200)='syzkaller\x00', 0xd40c, 0xec, &(0x7f0000000240)=""/236, 0x41000, 0x8, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x2, 0x5, 0x4}, 0x10}, 0x78)
msgrcv(r0, &(0x7f0000000100)={0x0, ""/188}, 0xc4, 0x3, 0x0)
clock_gettime(0x7, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
ioctl$CAPI_CLR_FLAGS(r1, 0x80044325, &(0x7f0000000440))
getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=<r2=>0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000480)=0xfed00000, 0x4)
setuid(r2)

05:54:58 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101500, 0x0)
ioctl$CAPI_CLR_FLAGS(r1, 0x80044325, &(0x7f0000000040)=0x1)
setuid(0xee00)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb)
socket$vsock_stream(0x28, 0x1, 0x0)
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000100)=0xf30, 0x0, 0x8)
socket$inet6(0xa, 0x6, 0x8)

05:54:58 executing program 2:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x0, [0x6, 0x100, 0x4, 0x1, 0x5, 0x101, 0x4, 0x6, 0xffff, 0x5, 0x5999, 0x0, 0x5, 0x7, 0x6, 0xfff, 0x1, 0xa, 0xa000, 0x7, 0x5, 0x7, 0x88, 0x65, 0x4, 0x888, 0x9, 0x1ff, 0x4, 0x26, 0x521f, 0x671, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x1, 0xfff0, 0xe79a, 0x800, 0xf76f, 0x5, 0x9, 0x2], 0x1000}})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2})
ioctl$CAPI_NCCI_GETUNIT(r2, 0x80044327, &(0x7f0000000080)=0x5)
setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000380), 0x4)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000140))
timer_delete(0x0)

05:54:58 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x0, [0x6, 0x100, 0x4, 0x1, 0x5, 0x101, 0x4, 0x6, 0xffff, 0x5, 0x5999, 0x0, 0x5, 0x7, 0x6, 0xfff, 0x1, 0xa, 0xa000, 0x7, 0x5, 0x7, 0x88, 0x65, 0x4, 0x888, 0x9, 0x1ff, 0x4, 0x26, 0x521f, 0x671, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x1, 0xfff0, 0xe79a, 0x800, 0xf76f, 0x5, 0x9, 0x2], 0x1000}})
setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000380), 0x4)

[ 2635.916542][T28332] loop1: detected capacity change from 32768 to 0
05:54:58 executing program 3:
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x4)
move_pages(0xffffffffffffffff, 0x7, &(0x7f0000000500)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000080)=[0x6ef2], &(0x7f00000000c0)=[0x0, 0x0], 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000300)=""/224)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540)='/dev/bsg\x00', 0x4684c0, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000280)={0x0, 0x4, "99af4e", 0xef, 0x81})
r1 = socket(0x18, 0x2, 0x20)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x40010)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f0000000140)=0x10)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00')
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r5, 0x80685600, &(0x7f0000000080))
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r6, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000580)={0x2, @pix_mp={0x2, 0x0, 0x3067900, 0x0, 0x1, [{0x4, 0x3f9f}, {0x40, 0x4}, {0x8, 0x2}, {0x1, 0x5}, {0x4, 0x7ff}, {0x4, 0x3}, {0xffff, 0x2}, {0x0, 0x81}], 0x8e, 0x81, 0x6, 0x0, 0x2}})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x2c, r4, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffe8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40801)

05:54:58 executing program 2:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x0, [0x6, 0x100, 0x4, 0x1, 0x5, 0x101, 0x4, 0x6, 0xffff, 0x5, 0x5999, 0x0, 0x5, 0x7, 0x6, 0xfff, 0x1, 0xa, 0xa000, 0x7, 0x5, 0x7, 0x88, 0x65, 0x4, 0x888, 0x9, 0x1ff, 0x4, 0x26, 0x521f, 0x671, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x1, 0xfff0, 0xe79a, 0x800, 0xf76f, 0x5, 0x9, 0x2], 0x1000}})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2})
ioctl$CAPI_NCCI_GETUNIT(r2, 0x80044327, &(0x7f0000000080)=0x5)
setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000380), 0x4)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000140))

[ 2636.017824][T28332] loop1: detected capacity change from 32768 to 0
05:54:58 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$CAPI_SET_FLAGS(0xffffffffffffffff, 0x80044324, &(0x7f0000000040))
syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x72ee17f2, 0x2)

05:54:58 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x2000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:58 executing program 2:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x0, [0x6, 0x100, 0x4, 0x1, 0x5, 0x101, 0x4, 0x6, 0xffff, 0x5, 0x5999, 0x0, 0x5, 0x7, 0x6, 0xfff, 0x1, 0xa, 0xa000, 0x7, 0x5, 0x7, 0x88, 0x65, 0x4, 0x888, 0x9, 0x1ff, 0x4, 0x26, 0x521f, 0x671, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x1, 0xfff0, 0xe79a, 0x800, 0xf76f, 0x5, 0x9, 0x2], 0x1000}})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2})
ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f0000000080)=0x5)
setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000380), 0x4)

05:54:58 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r1 = getpgrp(0x0)
ioprio_set$pid(0x2, r1, 0x5006)

05:54:58 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000380), 0x4)

05:54:58 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x2, 0x0, @thr={&(0x7f0000000000)="2bb9d57a43ab84089f0c6c826800d4a36ae63907fbfa61a96a8c278c0826008b486b7edd3a5b1c5cabd669f3a1ace452a2bdd387ee725cb7013bfb77fa5c68883d7dbca0ab68e3e695ef1e955a", &(0x7f0000000080)="0a6969f286069271efc186b24622b881e56e472d47d9f75f1520c1b97f6e3cdcd8286e186e0f2973fbd1829fcd8660cdb53ab5609ab2b9d2024382ae2d079ae60b4766c924d4c7daf2bb781ed7db3f76e00c624244dac93e69cbfe39694dd51915a35eca81058664b51e4fb8dead960061df07ad73d95b31402dfcfb23085c89e9cc338c053409eda160e67bd8431bbd46c885182be5ff15a8837efedf39ce1a1d1c61a37167a532ce4f9cf2f996c040687ff3cdd8b7b87a071434405cdfc4b8802c312bde3cc345836c84562b6cfe57e62bcb0205d814b9954991b1a2c9d86cf7"}}, &(0x7f00000001c0))

[ 2636.345917][T28365] loop1: detected capacity change from 65536 to 0
[ 2636.445303][T28365] loop1: detected capacity change from 65536 to 0
05:54:59 executing program 4:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x0, [0x6, 0x100, 0x4, 0x1, 0x5, 0x101, 0x4, 0x6, 0xffff, 0x5, 0x5999, 0x0, 0x5, 0x7, 0x6, 0xfff, 0x1, 0xa, 0xa000, 0x7, 0x5, 0x7, 0x88, 0x65, 0x4, 0x888, 0x9, 0x1ff, 0x4, 0x26, 0x521f, 0x671, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x1, 0xfff0, 0xe79a, 0x800, 0xf76f, 0x5, 0x9, 0x2], 0x1000}})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2})
ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f0000000080)=0x5)
setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000380), 0x4)

05:54:59 executing program 0:
r0 = socket$inet6(0xa, 0x80000, 0xd)
openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0)
syz_mount_image$cramfs(&(0x7f0000000040)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x100, 0x3, &(0x7f00000011c0)=[{&(0x7f00000000c0)="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", 0x1000, 0x2}, {&(0x7f00000010c0)="e9ae756f7f9fa4eb71504a24c62d6717c2bf5772f61e14ccce9c3a1f0d2ae79a2d9bc4fa35ba4c30b0b87979a6850f4d77b692c525ef9b3e4961128160b10addb4d07b3fc53a28ece7e9e3d939a7311a94a49d266c54fe2087e4f36f42de03fd1935308329", 0x65, 0x20}, {&(0x7f0000001140)="251baa928ecc81ae42535a8f37dfb0cd3374aaf7a1eefb3cd3febec04c1c477136fc164c4e05226a017b64fb8e10dbe9a2747337519f0d4e308fcb773efdfee7468550dc92d94b4c520880dfebddcc88ea08ef10ca4172884c32cf3ec85f7163", 0x60, 0x7fffffff}], 0x884000, &(0x7f0000001240)={[{'#-'}, {'.\x82@^)}^.'}, {']'}, {'cgroup.threads\x00'}, {'\\-'}, {}], [{@fsuuid={'fsuuid', 0x3d, {[0x39, 0x35, 0x37, 0x37, 0x31, 0x3d, 0x37, 0x38], 0x2d, [0x30, 0x62, 0x66, 0x65], 0x2d, [0x37, 0x39, 0x36, 0x39], 0x2d, [0x63, 0x65, 0x35, 0x35], 0x2d, [0x61, 0x35, 0x65, 0x33, 0x30, 0x38, 0x64, 0x62]}}}, {@hash='hash'}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@subj_role={'subj_role', 0x3d, 'cgroup.threads\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@obj_user={'obj_user', 0x3d, 'cgroup.threads\x00'}}, {@measure='measure'}, {@euid_lt={'euid<', 0xee01}}]})

05:54:59 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x3000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:59 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}})

05:54:59 executing program 2:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x0, [0x6, 0x100, 0x4, 0x1, 0x5, 0x101, 0x4, 0x6, 0xffff, 0x5, 0x5999, 0x0, 0x5, 0x7, 0x6, 0xfff, 0x1, 0xa, 0xa000, 0x7, 0x5, 0x7, 0x88, 0x65, 0x4, 0x888, 0x9, 0x1ff, 0x4, 0x26, 0x521f, 0x671, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x1, 0xfff0, 0xe79a, 0x800, 0xf76f, 0x5, 0x9, 0x2], 0x1000}})
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2})
ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f0000000080)=0x5)

05:54:59 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000380), 0x4)

05:54:59 executing program 2:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x0, [0x6, 0x100, 0x4, 0x1, 0x5, 0x101, 0x4, 0x6, 0xffff, 0x5, 0x5999, 0x0, 0x5, 0x7, 0x6, 0xfff, 0x1, 0xa, 0xa000, 0x7, 0x5, 0x7, 0x88, 0x65, 0x4, 0x888, 0x9, 0x1ff, 0x4, 0x26, 0x521f, 0x671, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x1, 0xfff0, 0xe79a, 0x800, 0xf76f, 0x5, 0x9, 0x2], 0x1000}})
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2})

[ 2637.004449][T28398] loop1: detected capacity change from 98304 to 0
05:54:59 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000380), 0x4)

05:54:59 executing program 4:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x0, [0x6, 0x100, 0x4, 0x1, 0x5, 0x101, 0x4, 0x6, 0xffff, 0x5, 0x5999, 0x0, 0x5, 0x7, 0x6, 0xfff, 0x1, 0xa, 0xa000, 0x7, 0x5, 0x7, 0x88, 0x65, 0x4, 0x888, 0x9, 0x1ff, 0x4, 0x26, 0x521f, 0x671, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x1, 0xfff0, 0xe79a, 0x800, 0xf76f, 0x5, 0x9, 0x2], 0x1000}})
setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000380), 0x4)

05:54:59 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x4})

[ 2637.136419][T28398] loop1: detected capacity change from 98304 to 0
05:54:59 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x0, 0x3, 0x4})
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:54:59 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x4000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:54:59 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000380), 0x4)

05:54:59 executing program 2:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x0, [0x6, 0x100, 0x4, 0x1, 0x5, 0x101, 0x4, 0x6, 0xffff, 0x5, 0x5999, 0x0, 0x5, 0x7, 0x6, 0xfff, 0x1, 0xa, 0xa000, 0x7, 0x5, 0x7, 0x88, 0x65, 0x4, 0x888, 0x9, 0x1ff, 0x4, 0x26, 0x521f, 0x671, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x1, 0xfff0, 0xe79a, 0x800, 0xf76f, 0x5, 0x9, 0x2], 0x1000}})
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))

05:54:59 executing program 4:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x0, [0x6, 0x100, 0x4, 0x1, 0x5, 0x101, 0x4, 0x6, 0xffff, 0x5, 0x5999, 0x0, 0x5, 0x7, 0x6, 0xfff, 0x1, 0xa, 0xa000, 0x7, 0x5, 0x7, 0x88, 0x65, 0x4, 0x888, 0x9, 0x1ff, 0x4, 0x26, 0x521f, 0x671, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x1, 0xfff0, 0xe79a, 0x800, 0xf76f, 0x5, 0x9, 0x2], 0x1000}})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000380), 0x4)

05:54:59 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = getpgrp(0xffffffffffffffff)
wait4(r0, 0x0, 0x0, 0x0)
r1 = gettid()
r2 = getpgrp(r1)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x8, 0x4, 0x30385056, 0x0, 0xff, 0x800, 0x4, 0xdd, 0x1, 0x2, 0x2, 0x1}})
wait4(r2, &(0x7f0000000000), 0x8, &(0x7f0000000180))
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x101102, 0x0)
ioctl$CAPI_GET_PROFILE(r4, 0xc0404309, &(0x7f0000000140)=0xfff)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r5, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000040)={0x6, 0x3, 0x4, 0x0, 0x40, {}, {0x5, 0xc, 0x66, 0x2, 0x80, 0x88, "69ced67b"}, 0xb6a, 0x236a282d846082f0, @offset=0x60, 0x5, 0x0, <r6=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f0000000240)={0x7, 0x0, 0x4, 0xe000, 0x81, {0x77359400}, {0x5, 0xc, 0x6, 0x38, 0x0, 0x81, "79f540a0"}, 0x4, 0x2, @offset=0x4e0c, 0x80, 0x0, r6})

[ 2637.463314][T28429] loop1: detected capacity change from 131072 to 0
05:55:00 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x181480, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
bind$can_raw(r1, &(0x7f0000000000), 0x10)
getresgid(&(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000240))
openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
gettid()
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x0, 0x0)

05:55:00 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000380), 0x4)

05:55:00 executing program 4:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x0, [0x6, 0x100, 0x4, 0x1, 0x5, 0x101, 0x4, 0x6, 0xffff, 0x5, 0x5999, 0x0, 0x5, 0x7, 0x6, 0xfff, 0x1, 0xa, 0xa000, 0x7, 0x5, 0x7, 0x88, 0x65, 0x4, 0x888, 0x9, 0x1ff, 0x4, 0x26, 0x521f, 0x671, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x1, 0xfff0, 0xe79a, 0x800, 0xf76f, 0x5, 0x9, 0x2], 0x1000}})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000380), 0x4)

[ 2637.597886][T28429] loop1: detected capacity change from 131072 to 0
05:55:00 executing program 2:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x0, [0x6, 0x100, 0x4, 0x1, 0x5, 0x101, 0x4, 0x6, 0xffff, 0x5, 0x5999, 0x0, 0x5, 0x7, 0x6, 0xfff, 0x1, 0xa, 0xa000, 0x7, 0x5, 0x7, 0x88, 0x65, 0x4, 0x888, 0x9, 0x1ff, 0x4, 0x26, 0x521f, 0x671, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x1, 0xfff0, 0xe79a, 0x800, 0xf76f, 0x5, 0x9, 0x2], 0x1000}})
socket$inet6_tcp(0xa, 0x1, 0x0)

05:55:00 executing program 3:
r0 = getpgrp(0xffffffffffffffff)
r1 = msgget$private(0x0, 0x28)
getresuid(&(0x7f0000000080), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@private1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@private0}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xe8)
msgctl$IPC_SET(r1, 0x1, &(0x7f0000000340)={{0x2, r2, 0xffffffffffffffff, r3, 0x0, 0xaf, 0x4}, 0x0, 0x0, 0xdc04, 0x400, 0x0, 0x1979, 0x3, 0x80, 0x9916, 0x3000, r0, r0})
wait4(r0, 0x0, 0x0, 0x0)
rt_tgsigqueueinfo(0x0, r0, 0x3c, &(0x7f0000000000)={0x2d, 0x1000000, 0x36})
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

05:55:00 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000380), 0x4)

05:55:00 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x5000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:00 executing program 4:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x0, [0x6, 0x100, 0x4, 0x1, 0x5, 0x101, 0x4, 0x6, 0xffff, 0x5, 0x5999, 0x0, 0x5, 0x7, 0x6, 0xfff, 0x1, 0xa, 0xa000, 0x7, 0x5, 0x7, 0x88, 0x65, 0x4, 0x888, 0x9, 0x1ff, 0x4, 0x26, 0x521f, 0x671, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x1, 0xfff0, 0xe79a, 0x800, 0xf76f, 0x5, 0x9, 0x2], 0x1000}})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000380), 0x4)

05:55:00 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x50, 0xffffffffffffffff, 0x8000000)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x42, 0x0, {0x3}}, 0xffff9ed4)

05:55:00 executing program 2:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x0, [0x6, 0x100, 0x4, 0x1, 0x5, 0x101, 0x4, 0x6, 0xffff, 0x5, 0x5999, 0x0, 0x5, 0x7, 0x6, 0xfff, 0x1, 0xa, 0xa000, 0x7, 0x5, 0x7, 0x88, 0x65, 0x4, 0x888, 0x9, 0x1ff, 0x4, 0x26, 0x521f, 0x671, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x1, 0xfff0, 0xe79a, 0x800, 0xf76f, 0x5, 0x9, 0x2], 0x1000}})

05:55:00 executing program 3:
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x5, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6dc}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0xa000)
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2638.056504][T28466] loop1: detected capacity change from 163840 to 0
05:55:00 executing program 4:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x0, [0x6, 0x100, 0x4, 0x1, 0x5, 0x101, 0x4, 0x6, 0xffff, 0x5, 0x5999, 0x0, 0x5, 0x7, 0x6, 0xfff, 0x1, 0xa, 0xa000, 0x7, 0x5, 0x7, 0x88, 0x65, 0x4, 0x888, 0x9, 0x1ff, 0x4, 0x26, 0x521f, 0x671, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x1, 0xfff0, 0xe79a, 0x800, 0xf76f, 0x5, 0x9, 0x2], 0x1000}})
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))

05:55:00 executing program 5:
socket$inet6(0xa, 0x3, 0x9)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000380), 0x4)

05:55:00 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, 0x1000})
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0)

05:55:00 executing program 0:
rt_sigpending(&(0x7f0000000040), 0xfffffffffffffc5a)
r0 = socket$inet6(0xa, 0x6, 0x1b)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
io_uring_setup(0x2d85, &(0x7f00000000c0)={0x0, 0xd600, 0x8, 0x0, 0x1ca})

[ 2638.169661][T28466] loop1: detected capacity change from 163840 to 0
05:55:00 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x6000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:00 executing program 2:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)

05:55:00 executing program 4:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x0, [0x6, 0x100, 0x4, 0x1, 0x5, 0x101, 0x4, 0x6, 0xffff, 0x5, 0x5999, 0x0, 0x5, 0x7, 0x6, 0xfff, 0x1, 0xa, 0xa000, 0x7, 0x5, 0x7, 0x88, 0x65, 0x4, 0x888, 0x9, 0x1ff, 0x4, 0x26, 0x521f, 0x671, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x1, 0xfff0, 0xe79a, 0x800, 0xf76f, 0x5, 0x9, 0x2], 0x1000}})
socket$inet6_tcp(0xa, 0x1, 0x0)

05:55:00 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000380), 0x4)

05:55:00 executing program 3:
r0 = getpgrp(0x0)
r1 = getpgrp(r0)
move_pages(r1, 0x0, 0x0, 0x0, 0x0, 0x4)

[ 2638.473400][T28499] loop1: detected capacity change from 196608 to 0
05:55:01 executing program 0:
write$capi20(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x5, 0x0, 0x82, 0x0, 0x3}, 0x10)
r0 = socket$inet6(0xa, 0x3, 0xa)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:55:01 executing program 4:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x0, [0x6, 0x100, 0x4, 0x1, 0x5, 0x101, 0x4, 0x6, 0xffff, 0x5, 0x5999, 0x0, 0x5, 0x7, 0x6, 0xfff, 0x1, 0xa, 0xa000, 0x7, 0x5, 0x7, 0x88, 0x65, 0x4, 0x888, 0x9, 0x1ff, 0x4, 0x26, 0x521f, 0x671, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x1, 0xfff0, 0xe79a, 0x800, 0xf76f, 0x5, 0x9, 0x2], 0x1000}})

[ 2638.557301][T28499] loop1: detected capacity change from 196608 to 0
05:55:01 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x7000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:01 executing program 2:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)

05:55:01 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000380), 0x4)

05:55:01 executing program 3:
userfaultfd(0x1800)
userfaultfd(0x80000)
r0 = userfaultfd(0x101000)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x1})
move_pages(0x0, 0x57, 0x0, 0x0, 0x0, 0x6)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x801c2, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x3, 0x1, 0x1, 0x800})
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x7, 0x8)
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000000c0)=0x6)
socket$xdp(0x2c, 0x3, 0x0)

[ 2638.765998][T28523] loop1: detected capacity change from 229376 to 0
05:55:01 executing program 4:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)
syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x1c00000000000000, 0x2)

05:55:01 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000380), 0x4)

05:55:01 executing program 2:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)

[ 2638.858451][T28523] loop1: detected capacity change from 229376 to 0
05:55:01 executing program 2:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)

05:55:01 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x8000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:01 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000003c0)={'batadv0\x00', <r2=>0x0})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000500)=0xe8)
msgget$private(0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000c00)={'batadv0\x00', <r4=>0x0})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000c40)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@private}, 0x0, @in=@remote}}, &(0x7f0000000d40)=0xe8)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000012c0)={&(0x7f0000000d80)={0x520, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [{{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x54, 0x4, [{0x0, 0x6, 0x66, 0x401}, {0x2, 0x1, 0x7f, 0x4}, {0x2, 0x1f, 0x0, 0x4}, {0x2, 0x3a, 0x1, 0x400000}, {0x80, 0x6a, 0x3f, 0x8001}, {0x2, 0x40, 0x1, 0x9}, {0x0, 0x3b, 0x3f, 0x81}, {0x5, 0x1, 0x80, 0x40}, {0x8001, 0x8, 0x1, 0x7}, {0x7fff, 0x0, 0x7f, 0x3}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x43}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}]}, 0x520}, 0x1, 0x0, 0x0, 0x44}, 0x8000)
socket$inet_smc(0x2b, 0x1, 0x0)

05:55:01 executing program 3:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6)

05:55:01 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000380), 0x4)

05:55:01 executing program 4:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)

05:55:01 executing program 2:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)

05:55:01 executing program 3:
r0 = getpgrp(0xffffffffffffffff)
wait4(r0, 0x0, 0x0, 0x0)
move_pages(r0, 0xfffffffffffffd74, 0x0, 0x0, 0x0, 0x4)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x80081, 0x0)

[ 2639.223361][T28554] loop1: detected capacity change from 262144 to 0
05:55:01 executing program 4:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)

05:55:01 executing program 0:
r0 = msgget(0x0, 0x200)
userfaultfd(0x1000)
msgctl$IPC_RMID(r0, 0x0)
msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000000))
r1 = socket$inet6(0xa, 0x1, 0xfffffffe)
openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:55:01 executing program 3:
r0 = gettid()
move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x4)

[ 2639.351425][T28554] loop1: detected capacity change from 262144 to 0
05:55:01 executing program 2:
socket$inet6(0xa, 0x3, 0x9)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)

05:55:01 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0)

05:55:02 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x20000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:02 executing program 4:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)

05:55:02 executing program 3:
rt_sigpending(&(0x7f0000000040), 0xfffffffffffffc5a)
r0 = socket$inet6(0xa, 0x6, 0x1b)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
io_uring_setup(0x2d85, &(0x7f00000000c0)={0x0, 0xd600, 0x8, 0x0, 0x1ca})

05:55:02 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)

05:55:02 executing program 5:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x8000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:02 executing program 0:
r0 = socket$inet6(0xa, 0x80000, 0x1fd)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:55:02 executing program 4:
socket$inet6(0xa, 0x3, 0x9)
syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x284040)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)

[ 2639.673985][T28585] loop1: detected capacity change from 264192 to 0
05:55:02 executing program 4:
socket$inet6(0xa, 0x3, 0x9)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)

[ 2639.757328][T28594] loop5: detected capacity change from 262144 to 0
05:55:02 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)

05:55:02 executing program 3:
rt_sigpending(&(0x7f0000000040), 0xfffffffffffffc5a)
r0 = socket$inet6(0xa, 0x6, 0x1b)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
io_uring_setup(0x2d85, &(0x7f00000000c0)={0x0, 0xd600, 0x8, 0x0, 0x1ca})

05:55:02 executing program 5:
r0 = getpgrp(0xffffffffffffffff)
r1 = msgget$private(0x0, 0x28)
getresuid(&(0x7f0000000080), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@private1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@private0}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xe8)
msgctl$IPC_SET(r1, 0x1, &(0x7f0000000340)={{0x2, r2, 0xffffffffffffffff, r3, 0x0, 0xaf, 0x4}, 0x0, 0x0, 0xdc04, 0x400, 0x0, 0x1979, 0x3, 0x80, 0x9916, 0x3000, r0, r0})
wait4(r0, 0x0, 0x0, 0x0)
rt_tgsigqueueinfo(0x0, r0, 0x3c, &(0x7f0000000000)={0x2d, 0x1000000, 0x36})
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2639.909668][T28585] loop1: detected capacity change from 264192 to 0
05:55:02 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x20000, 0x0)
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffb000/0x2000)=nil, 0x2000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="0f15da3e360fc71f0f01b3abd78d7cc4e1005d160fc76a00c4e2b18caf0020000066b856008ec864e02f66ba6100ecb9670b00000f32", 0x36}], 0x1, 0x44, &(0x7f00000000c0), 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x800000, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x2000000, 0x11, r2, 0x8000000)

05:55:02 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x20100000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:02 executing program 5:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x4800, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:02 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa)

05:55:02 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)

[ 2640.275269][T28629] loop5: detected capacity change from 36 to 0
05:55:02 executing program 3:
rt_sigpending(&(0x7f0000000040), 0xfffffffffffffc5a)
r0 = socket$inet6(0xa, 0x6, 0x1b)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
io_uring_setup(0x2d85, &(0x7f00000000c0)={0x0, 0xd600, 0x8, 0x0, 0x1ca})

05:55:02 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)

05:55:02 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)

05:55:02 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000480)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8)
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000008c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x1dc, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xd5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r3}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x8, 0x80, 0x1, 0x9}]}}}]}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
ioctl$CAPI_GET_ERRCODE(0xffffffffffffffff, 0x80024321, &(0x7f0000000000))
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f00000000c0)=0x45c, 0x4)
clock_settime(0x7, &(0x7f0000000040)={0x0, 0x989680})

05:55:02 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4, 0x800, 0x100, {}, {0x2, 0x8, 0xa4, 0x34, 0x6, 0x9, "2fda6f21"}, 0x0, 0x0, @offset=0x1, 0x8001, 0x0, r1})
clock_gettime(0xd4e8863c12c8ef23, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000003c0)={'batadv0\x00', <r3=>0x0})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x0, @xdp={0x2c, 0x4, r2}, @sco={0x1f, @none}, @xdp={0x2c, 0x3, r3, 0x1c}, 0x0, 0x0, 0x0, 0x0, 0x3e0, &(0x7f0000000400)='ipvlan1\x00', 0x10f3, 0x9, 0x3})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40881}, 0x48004)

[ 2640.416438][T28633] loop1: detected capacity change from 264192 to 0
[ 2640.483148][T28633] loop1: detected capacity change from 264192 to 0
05:55:03 executing program 2:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x101080, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1d, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xc35}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x994}, @generic={0x0, 0xc, 0xe, 0x4, 0x3}, @jmp={0x5, 0x1, 0x5, 0x7, 0x6, 0x50, 0x8}, @call={0x85, 0x0, 0x0, 0x2e}, @map={0x18, 0x2, 0x1, 0x0, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, [], 0x0, 0x1b, r0, 0x8, &(0x7f0000000100)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0x2, 0x7f, 0x1}, 0x10}, 0x78)

05:55:03 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)

05:55:03 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x3f000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:03 executing program 5:
clock_gettime(0x4, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000000), 0x1, &(0x7f0000000040))
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f00000004c0)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000400)=""/191, 0xbf}], 0x2}, 0x10060)
r1 = msgget(0x0, 0x200)
msgctl$IPC_RMID(r1, 0x0)
msgctl$IPC_RMID(r1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="05000000000000000100000000000000000000000100000005000000000000000200000000000000050000000000000000000000aa930000ffffffff0800000000000000000000000008000000000000aa01000000000000ed000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000091c58bd2ac20a10739c028ddc004df92c2cf1b92ba06b8bf0e13a84e61f9dbea3cd10b310ed6e0dcf88afd7d0affa861c8342c5ec12b75a766f716d9ecbf9393c143d34e11a6240c23af4bdf5cad13e2ebff427af51de6"])
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'})

05:55:03 executing program 0:
r0 = socket(0x2, 0x1, 0x10001)
getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000740), &(0x7f0000000780)=0x4)
r1 = socket$inet6(0xa, 0x3, 0x9)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f00000002c0)={0x0, 0xc80, 0x6})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000000c0))
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bsg\x00', 0x404003, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000000))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x77359400}, 0x1, 0x0, 0x1}, 0x9f1a)
openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:55:03 executing program 2:
clock_gettime(0x4, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000000), 0x1, &(0x7f0000000040))
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f00000004c0)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000400)=""/191, 0xbf}], 0x2}, 0x10060)
r1 = msgget(0x0, 0x200)
msgctl$IPC_RMID(r1, 0x0)
msgctl$IPC_RMID(r1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="05000000000000000100000000000000000000000100000005000000000000000200000000000000050000000000000000000000aa930000ffffffff0800000000000000000000000008000000000000aa01000000000000ed000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000091c58bd2ac20a10739c028ddc004df92c2cf1b92ba06b8bf0e13a84e61f9dbea3cd10b310ed6e0dcf88afd7d0affa861c8342c5ec12b75a766f716d9ecbf9393c143d34e11a6240c23af4bdf5cad13e2ebff427af51de6"])
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'})

05:55:03 executing program 3:
rt_sigpending(&(0x7f0000000040), 0xfffffffffffffc5a)
r0 = socket$inet6(0xa, 0x6, 0x1b)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

[ 2640.806165][T28670] loop1: detected capacity change from 264192 to 0
05:55:03 executing program 2:
clock_gettime(0x4, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000000), 0x1, &(0x7f0000000040))
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f00000004c0)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000400)=""/191, 0xbf}], 0x2}, 0x10060)
r1 = msgget(0x0, 0x200)
msgctl$IPC_RMID(r1, 0x0)
msgctl$IPC_RMID(r1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="05000000000000000100000000000000000000000100000005000000000000000200000000000000050000000000000000000000aa930000ffffffff0800000000000000000000000008000000000000aa01000000000000ed000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000091c58bd2ac20a10739c028ddc004df92c2cf1b92ba06b8bf0e13a84e61f9dbea3cd10b310ed6e0dcf88afd7d0affa861c8342c5ec12b75a766f716d9ecbf9393c143d34e11a6240c23af4bdf5cad13e2ebff427af51de6"])
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'})

05:55:03 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)

05:55:03 executing program 5:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x2000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

[ 2640.942738][T28670] loop1: detected capacity change from 264192 to 0
05:55:03 executing program 2:
clock_gettime(0x4, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000000), 0x1, &(0x7f0000000040))
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f00000004c0)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000400)=""/191, 0xbf}], 0x2}, 0x10060)
r1 = msgget(0x0, 0x200)
msgctl$IPC_RMID(r1, 0x0)
msgctl$IPC_RMID(r1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="05000000000000000100000000000000000000000100000005000000000000000200000000000000050000000000000000000000aa930000ffffffff0800000000000000000000000008000000000000aa01000000000000ed000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000091c58bd2ac20a10739c028ddc004df92c2cf1b92ba06b8bf0e13a84e61f9dbea3cd10b310ed6e0dcf88afd7d0affa861c8342c5ec12b75a766f716d9ecbf9393c143d34e11a6240c23af4bdf5cad13e2ebff427af51de6"])
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'})

05:55:03 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil})
socket$inet6(0xa, 0x2, 0xa)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)

05:55:03 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x40000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

[ 2641.081673][T28693] loop5: detected capacity change from 16 to 0
05:55:03 executing program 2:
clock_gettime(0x4, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000000), 0x1, &(0x7f0000000040))
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f00000004c0)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000400)=""/191, 0xbf}], 0x2}, 0x10060)
r1 = msgget(0x0, 0x200)
msgctl$IPC_RMID(r1, 0x0)
msgctl$IPC_RMID(r1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="05000000000000000100000000000000000000000100000005000000000000000200000000000000050000000000000000000000aa930000ffffffff0800000000000000000000000008000000000000aa01000000000000ed000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000091c58bd2ac20a10739c028ddc004df92c2cf1b92ba06b8bf0e13a84e61f9dbea3cd10b310ed6e0dcf88afd7d0affa861c8342c5ec12b75a766f716d9ecbf9393c143d34e11a6240c23af4bdf5cad13e2ebff427af51de6"])
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))

05:55:03 executing program 4:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x3f000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:03 executing program 3:
rt_sigpending(&(0x7f0000000040), 0xfffffffffffffc5a)
socket$inet6(0xa, 0x6, 0x1b)

05:55:03 executing program 5:
r0 = socket(0x2, 0x1, 0x10001)
getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000740), &(0x7f0000000780)=0x4)
r1 = socket$inet6(0xa, 0x3, 0x9)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f00000002c0)={0x0, 0xc80, 0x6})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000000c0))
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bsg\x00', 0x404003, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000000))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x77359400}, 0x1, 0x0, 0x1}, 0x9f1a)
openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

[ 2641.318473][T28712] loop1: detected capacity change from 264192 to 0
[ 2641.350858][T28713] loop4: detected capacity change from 264192 to 0
05:55:03 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000014, 0x10012, 0xffffffffffffffff, 0x180000000)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:55:03 executing program 2:
clock_gettime(0x4, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000000), 0x1, &(0x7f0000000040))
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f00000004c0)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000400)=""/191, 0xbf}], 0x2}, 0x10060)
r1 = msgget(0x0, 0x200)
msgctl$IPC_RMID(r1, 0x0)
msgctl$IPC_RMID(r1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="05000000000000000100000000000000000000000100000005000000000000000200000000000000050000000000000000000000aa930000ffffffff0800000000000000000000000008000000000000aa01000000000000ed000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000091c58bd2ac20a10739c028ddc004df92c2cf1b92ba06b8bf0e13a84e61f9dbea3cd10b310ed6e0dcf88afd7d0affa861c8342c5ec12b75a766f716d9ecbf9393c143d34e11a6240c23af4bdf5cad13e2ebff427af51de6"])
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)

[ 2641.423394][T28712] loop1: detected capacity change from 264192 to 0
05:55:04 executing program 2:
clock_gettime(0x4, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000000), 0x1, &(0x7f0000000040))
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f00000004c0)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000400)=""/191, 0xbf}], 0x2}, 0x10060)
r1 = msgget(0x0, 0x200)
msgctl$IPC_RMID(r1, 0x0)
msgctl$IPC_RMID(r1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="05000000000000000100000000000000000000000100000005000000000000000200000000000000050000000000000000000000aa930000ffffffff0800000000000000000000000008000000000000aa01000000000000ed000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000091c58bd2ac20a10739c028ddc004df92c2cf1b92ba06b8bf0e13a84e61f9dbea3cd10b310ed6e0dcf88afd7d0affa861c8342c5ec12b75a766f716d9ecbf9393c143d34e11a6240c23af4bdf5cad13e2ebff427af51de6"])

05:55:04 executing program 3:
rt_sigpending(&(0x7f0000000040), 0xfffffffffffffc5a)

05:55:04 executing program 2:
clock_gettime(0x4, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000000), 0x1, &(0x7f0000000040))
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f00000004c0)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000400)=""/191, 0xbf}], 0x2}, 0x10060)
r1 = msgget(0x0, 0x200)
msgctl$IPC_RMID(r1, 0x0)
msgctl$IPC_RMID(r1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

05:55:04 executing program 4:
clock_gettime(0x4, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000000), 0x1, &(0x7f0000000040))
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f00000004c0)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000400)=""/191, 0xbf}], 0x2}, 0x10060)
r1 = msgget(0x0, 0x200)
msgctl$IPC_RMID(r1, 0x0)
msgctl$IPC_RMID(r1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="05000000000000000100000000000000000000000100000005000000000000000200000000000000050000000000000000000000aa930000ffffffff0800000000000000000000000008000000000000aa01000000000000ed000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000091c58bd2ac20a10739c028ddc004df92c2cf1b92ba06b8bf0e13a84e61f9dbea3cd10b310ed6e0dcf88afd7d0affa861c8342c5ec12b75a766f716d9ecbf9393c143d34e11a6240c23af4bdf5cad13e2ebff427af51de6"])
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))

05:55:04 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x9)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r2 = msgget(0x0, 0x72)
msgctl$MSG_STAT_ANY(r2, 0xd, &(0x7f00000004c0)=""/109)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x3})
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = socket(0x25, 0x3, 0x1)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000280)={'erspan0\x00', <r5=>0x0, 0x7800, 0x20, 0x4, 0xffffffc0, {{0x1a, 0x4, 0x1, 0x1b, 0x68, 0x65, 0x0, 0x0, 0x29, 0x0, @multicast1, @loopback, {[@timestamp_addr={0x44, 0x1c, 0x2f, 0x1, 0x9, [{@broadcast, 0x1}, {@multicast1, 0x400000}, {@loopback, 0x200}]}, @ssrr={0x89, 0x1f, 0x62, [@loopback, @rand_addr=0x64010100, @multicast1, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @lsrr={0x83, 0x17, 0x66, [@multicast2, @multicast2, @loopback, @loopback, @empty]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4d}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3f}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0xc001}, 0x20000800)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in6=@empty}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

05:55:04 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x48000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:04 executing program 5:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil})
socket$inet6(0xa, 0x2, 0xa)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)

05:55:04 executing program 2:
clock_gettime(0x4, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000000), 0x1, &(0x7f0000000040))
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f00000004c0)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000400)=""/191, 0xbf}], 0x2}, 0x10060)
r1 = msgget(0x0, 0x200)
msgctl$IPC_RMID(r1, 0x0)
msgctl$IPC_RMID(r1, 0x0)

05:55:04 executing program 3:
rt_sigpending(0x0, 0x0)

05:55:04 executing program 2:
clock_gettime(0x4, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000000), 0x1, &(0x7f0000000040))
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f00000004c0)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000400)=""/191, 0xbf}], 0x2}, 0x10060)
r1 = msgget(0x0, 0x200)
msgctl$IPC_RMID(r1, 0x0)

[ 2641.811735][T28749] loop1: detected capacity change from 264192 to 0
05:55:04 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0x2, 0x6})
clock_gettime(0x0, &(0x7f0000000140)={<r1=>0x0, <r2=>0x0})
clock_settime(0x7, &(0x7f0000000180)={r1, r2+60000000})
clock_gettime(0x0, &(0x7f0000000040)={<r3=>0x0, <r4=>0x0})
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0x40, 0x1, 0x4, 0x70000, 0x1, {r3, r4/1000+60000}, {0x4, 0x2, 0x8b, 0x80, 0x5, 0x2, "c0cb0ee8"}, 0x8, 0x3, @offset=0x8001, 0x9})
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2641.889419][T28749] loop1: detected capacity change from 264192 to 0
05:55:04 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0x2, 0x6})
clock_gettime(0x0, &(0x7f0000000140)={<r1=>0x0, <r2=>0x0})
clock_settime(0x7, &(0x7f0000000180)={r1, r2+60000000})
clock_gettime(0x0, &(0x7f0000000040)={<r3=>0x0, <r4=>0x0})
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0x40, 0x1, 0x4, 0x70000, 0x1, {r3, r4/1000+60000}, {0x4, 0x2, 0x8b, 0x80, 0x5, 0x2, "c0cb0ee8"}, 0x8, 0x3, @offset=0x8001, 0x9})
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

05:55:04 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x4c000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:04 executing program 3:
rt_sigpending(0x0, 0x0)

05:55:04 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100)=<r0=>0x0, &(0x7f0000000140))
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0)
syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r1, 0xe812, {0x0, r2}, 0xe7e, 0x0, 0x1, {0x0, 0x0, r3}}, 0x9b31)
clock_gettime(0x0, &(0x7f0000000000)={<r4=>0x0, <r5=>0x0})
clock_settime(0x4, &(0x7f0000000040)={r4, r5+60000000})

05:55:04 executing program 2:
clock_gettime(0x4, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000000), 0x1, &(0x7f0000000040))
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f00000004c0)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000400)=""/191, 0xbf}], 0x2}, 0x10060)
msgget(0x0, 0x200)

05:55:04 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0x2, 0x6})
clock_gettime(0x0, &(0x7f0000000140)={<r1=>0x0, <r2=>0x0})
clock_settime(0x7, &(0x7f0000000180)={r1, r2+60000000})
clock_gettime(0x0, &(0x7f0000000040)={<r3=>0x0, <r4=>0x0})
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0x40, 0x1, 0x4, 0x70000, 0x1, {r3, r4/1000+60000}, {0x4, 0x2, 0x8b, 0x80, 0x5, 0x2, "c0cb0ee8"}, 0x8, 0x3, @offset=0x8001, 0x9})
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

05:55:04 executing program 3:
rt_sigpending(0x0, 0x0)

05:55:04 executing program 0:
clock_gettime(0x4, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000000), 0x1, &(0x7f0000000040))
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f00000004c0)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000400)=""/191, 0xbf}], 0x2}, 0x10060)
r1 = msgget(0x0, 0x200)
msgctl$IPC_RMID(r1, 0x0)

05:55:04 executing program 3:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x700, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

[ 2642.302380][T28780] loop1: detected capacity change from 264192 to 0
05:55:04 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100)=<r0=>0x0, &(0x7f0000000140))
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0)
syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r1, 0xe812, {0x0, r2}, 0xe7e, 0x0, 0x1, {0x0, 0x0, r3}}, 0x9b31)
clock_gettime(0x0, &(0x7f0000000000)={<r4=>0x0, <r5=>0x0})
clock_settime(0x4, &(0x7f0000000040)={r4, r5+60000000})

05:55:04 executing program 0:
r0 = socket$inet6(0xa, 0x4, 0xa7ea)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r2 = gettid()
pselect6(0x40, &(0x7f0000001300)={0x3f, 0x35f, 0x1000, 0x7, 0xff, 0x5, 0x8, 0xfffffffffffffffc}, &(0x7f0000001340)={0xffffffffffff7e38, 0x4, 0x4, 0x5, 0x8, 0x1ff, 0x2, 0x1}, &(0x7f0000001380)={0xffffffff, 0x4, 0x0, 0x200, 0xe4a5, 0xcd4, 0x7, 0x800}, &(0x7f00000013c0)={0x0, 0x989680}, &(0x7f0000001440)={&(0x7f0000001400)={[0x3ff]}, 0x8})
write$cgroup_pid(r1, &(0x7f0000000180)=r2, 0x12)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="b7ebce542568a4fc6ea1dff69b053d0e0652f4d222faa8859af4f53eb221c4ecd0f555bdaa6cfd33975c1e387c29fdd7db75769c090600d01b5b3d9da0ae1432f5adad7e9d4b063b514a6b1347", @ANYRES16=0x0, @ANYBLOB="00012cbd700100dbdf250c0000002b0002000000000500003b00faff000000000000000000000100000000000000000000000000000000000000000000000000030000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
write$tcp_mem(0xffffffffffffffff, &(0x7f00000000c0)={0xbeef, 0x20, 0x1, 0x20, 0x80}, 0x48)
rt_sigprocmask(0x3, &(0x7f00000001c0)={[0x1]}, &(0x7f0000000200), 0x8)
r3 = gettid()
r4 = gettid()
rt_tgsigqueueinfo(r3, r4, 0x2a, &(0x7f00000014c0)={0x27, 0x1})
sysfs$2(0x2, 0x1, &(0x7f0000000300)=""/4096)
clock_gettime(0x1, &(0x7f0000001480))

[ 2642.426302][T28780] loop1: detected capacity change from 264192 to 0
05:55:05 executing program 2:
clock_gettime(0x4, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000000), 0x1, &(0x7f0000000040))
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f00000004c0)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000400)=""/191, 0xbf}], 0x2}, 0x10060)

[ 2642.481289][T28794] loop3: detected capacity change from 3 to 0
05:55:05 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0x2, 0x6})
clock_gettime(0x0, &(0x7f0000000140)={<r1=>0x0, <r2=>0x0})
clock_settime(0x7, &(0x7f0000000180)={r1, r2+60000000})
clock_gettime(0x0, &(0x7f0000000040)={<r3=>0x0, <r4=>0x0})
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0x40, 0x1, 0x4, 0x70000, 0x1, {r3, r4/1000+60000}, {0x4, 0x2, 0x8b, 0x80, 0x5, 0x2, "c0cb0ee8"}, 0x8, 0x3, @offset=0x8001, 0x9})
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

05:55:05 executing program 0:
r0 = socket$inet6(0xa, 0x4, 0xa7ea)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r2 = gettid()
pselect6(0x40, &(0x7f0000001300)={0x3f, 0x35f, 0x1000, 0x7, 0xff, 0x5, 0x8, 0xfffffffffffffffc}, &(0x7f0000001340)={0xffffffffffff7e38, 0x4, 0x4, 0x5, 0x8, 0x1ff, 0x2, 0x1}, &(0x7f0000001380)={0xffffffff, 0x4, 0x0, 0x200, 0xe4a5, 0xcd4, 0x7, 0x800}, &(0x7f00000013c0)={0x0, 0x989680}, &(0x7f0000001440)={&(0x7f0000001400)={[0x3ff]}, 0x8})
write$cgroup_pid(r1, &(0x7f0000000180)=r2, 0x12)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="b7ebce542568a4fc6ea1dff69b053d0e0652f4d222faa8859af4f53eb221c4ecd0f555bdaa6cfd33975c1e387c29fdd7db75769c090600d01b5b3d9da0ae1432f5adad7e9d4b063b514a6b1347", @ANYRES16=0x0, @ANYBLOB="00012cbd700100dbdf250c0000002b0002000000000500003b00faff000000000000000000000100000000000000000000000000000000000000000000000000030000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
write$tcp_mem(0xffffffffffffffff, &(0x7f00000000c0)={0xbeef, 0x20, 0x1, 0x20, 0x80}, 0x48)
rt_sigprocmask(0x3, &(0x7f00000001c0)={[0x1]}, &(0x7f0000000200), 0x8)
r3 = gettid()
r4 = gettid()
rt_tgsigqueueinfo(r3, r4, 0x2a, &(0x7f00000014c0)={0x27, 0x1})
sysfs$2(0x2, 0x1, &(0x7f0000000300)=""/4096)
clock_gettime(0x1, &(0x7f0000001480))

05:55:05 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x68000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:05 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x9)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00'})
openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
socket(0x18, 0x1, 0x80)
socket$inet_udp(0x2, 0x2, 0x0)

05:55:05 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x9)
getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000100), &(0x7f00000000c0)=0x4)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x400)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$NBD_CLEAR_QUE(r2, 0xab05)
ioctl$NBD_CLEAR_QUE(r1, 0xab05)

05:55:05 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100)=<r0=>0x0, &(0x7f0000000140))
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0)
syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r1, 0xe812, {0x0, r2}, 0xe7e, 0x0, 0x1, {0x0, 0x0, r3}}, 0x9b31)
clock_gettime(0x0, &(0x7f0000000000)={<r4=>0x0, <r5=>0x0})
clock_settime(0x4, &(0x7f0000000040)={r4, r5+60000000})

05:55:05 executing program 2:
clock_gettime(0x4, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000000), 0x1, &(0x7f0000000040))
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000400)=""/191, 0xbf}], 0x2}, 0x10060)

05:55:05 executing program 0:
r0 = socket$inet6(0xa, 0x4, 0xa7ea)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r2 = gettid()
pselect6(0x40, &(0x7f0000001300)={0x3f, 0x35f, 0x1000, 0x7, 0xff, 0x5, 0x8, 0xfffffffffffffffc}, &(0x7f0000001340)={0xffffffffffff7e38, 0x4, 0x4, 0x5, 0x8, 0x1ff, 0x2, 0x1}, &(0x7f0000001380)={0xffffffff, 0x4, 0x0, 0x200, 0xe4a5, 0xcd4, 0x7, 0x800}, &(0x7f00000013c0)={0x0, 0x989680}, &(0x7f0000001440)={&(0x7f0000001400)={[0x3ff]}, 0x8})
write$cgroup_pid(r1, &(0x7f0000000180)=r2, 0x12)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="b7ebce542568a4fc6ea1dff69b053d0e0652f4d222faa8859af4f53eb221c4ecd0f555bdaa6cfd33975c1e387c29fdd7db75769c090600d01b5b3d9da0ae1432f5adad7e9d4b063b514a6b1347", @ANYRES16=0x0, @ANYBLOB="00012cbd700100dbdf250c0000002b0002000000000500003b00faff000000000000000000000100000000000000000000000000000000000000000000000000030000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
write$tcp_mem(0xffffffffffffffff, &(0x7f00000000c0)={0xbeef, 0x20, 0x1, 0x20, 0x80}, 0x48)
rt_sigprocmask(0x3, &(0x7f00000001c0)={[0x1]}, &(0x7f0000000200), 0x8)
r3 = gettid()
r4 = gettid()
rt_tgsigqueueinfo(r3, r4, 0x2a, &(0x7f00000014c0)={0x27, 0x1})
sysfs$2(0x2, 0x1, &(0x7f0000000300)=""/4096)
clock_gettime(0x1, &(0x7f0000001480))

[ 2642.848125][T28821] loop1: detected capacity change from 264192 to 0
05:55:05 executing program 0:
r0 = socket$inet6(0xa, 0x4, 0xa7ea)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r2 = gettid()
pselect6(0x40, &(0x7f0000001300)={0x3f, 0x35f, 0x1000, 0x7, 0xff, 0x5, 0x8, 0xfffffffffffffffc}, &(0x7f0000001340)={0xffffffffffff7e38, 0x4, 0x4, 0x5, 0x8, 0x1ff, 0x2, 0x1}, &(0x7f0000001380)={0xffffffff, 0x4, 0x0, 0x200, 0xe4a5, 0xcd4, 0x7, 0x800}, &(0x7f00000013c0)={0x0, 0x989680}, &(0x7f0000001440)={&(0x7f0000001400)={[0x3ff]}, 0x8})
write$cgroup_pid(r1, &(0x7f0000000180)=r2, 0x12)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="b7ebce542568a4fc6ea1dff69b053d0e0652f4d222faa8859af4f53eb221c4ecd0f555bdaa6cfd33975c1e387c29fdd7db75769c090600d01b5b3d9da0ae1432f5adad7e9d4b063b514a6b1347", @ANYRES16=0x0, @ANYBLOB="00012cbd700100dbdf250c0000002b0002000000000500003b00faff000000000000000000000100000000000000000000000000000000000000000000000000030000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
write$tcp_mem(0xffffffffffffffff, &(0x7f00000000c0)={0xbeef, 0x20, 0x1, 0x20, 0x80}, 0x48)
rt_sigprocmask(0x3, &(0x7f00000001c0)={[0x1]}, &(0x7f0000000200), 0x8)
r3 = gettid()
r4 = gettid()
rt_tgsigqueueinfo(r3, r4, 0x2a, &(0x7f00000014c0)={0x27, 0x1})
sysfs$2(0x2, 0x1, &(0x7f0000000300)=""/4096)

05:55:05 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x9)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00'})
openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
socket(0x18, 0x1, 0x80)
socket$inet_udp(0x2, 0x2, 0x0)

[ 2642.947344][T28821] loop1: detected capacity change from 264192 to 0
05:55:05 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x6c000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:05 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x9)
getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000100), &(0x7f00000000c0)=0x4)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x400)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$NBD_CLEAR_QUE(r2, 0xab05)
ioctl$NBD_CLEAR_QUE(r1, 0xab05)

05:55:05 executing program 2:
clock_gettime(0x4, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000000), 0x1, &(0x7f0000000040))
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000400)=""/191, 0xbf}], 0x2}, 0x10060)

05:55:05 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100)=<r0=>0x0, &(0x7f0000000140))
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0)
syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r1, 0xe812, {0x0, r2}, 0xe7e, 0x0, 0x1, {0x0, 0x0, r3}}, 0x9b31)
clock_gettime(0x0, &(0x7f0000000000))

05:55:05 executing program 0:
r0 = socket$inet6(0xa, 0x4, 0xa7ea)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r2 = gettid()
pselect6(0x40, &(0x7f0000001300)={0x3f, 0x35f, 0x1000, 0x7, 0xff, 0x5, 0x8, 0xfffffffffffffffc}, &(0x7f0000001340)={0xffffffffffff7e38, 0x4, 0x4, 0x5, 0x8, 0x1ff, 0x2, 0x1}, &(0x7f0000001380)={0xffffffff, 0x4, 0x0, 0x200, 0xe4a5, 0xcd4, 0x7, 0x800}, &(0x7f00000013c0)={0x0, 0x989680}, &(0x7f0000001440)={&(0x7f0000001400)={[0x3ff]}, 0x8})
write$cgroup_pid(r1, &(0x7f0000000180)=r2, 0x12)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="b7ebce542568a4fc6ea1dff69b053d0e0652f4d222faa8859af4f53eb221c4ecd0f555bdaa6cfd33975c1e387c29fdd7db75769c090600d01b5b3d9da0ae1432f5adad7e9d4b063b514a6b1347", @ANYRES16=0x0, @ANYBLOB="00012cbd700100dbdf250c0000002b0002000000000500003b00faff000000000000000000000100000000000000000000000000000000000000000000000000030000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
write$tcp_mem(0xffffffffffffffff, &(0x7f00000000c0)={0xbeef, 0x20, 0x1, 0x20, 0x80}, 0x48)
rt_sigprocmask(0x3, &(0x7f00000001c0)={[0x1]}, &(0x7f0000000200), 0x8)
r3 = gettid()
r4 = gettid()
rt_tgsigqueueinfo(r3, r4, 0x2a, &(0x7f00000014c0)={0x27, 0x1})

[ 2643.198982][T28852] loop1: detected capacity change from 264192 to 0
05:55:05 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100)=<r0=>0x0, &(0x7f0000000140))
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0)
syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r1, 0xe812, {0x0, r2}, 0xe7e, 0x0, 0x1, {0x0, 0x0, r3}}, 0x9b31)

05:55:05 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x9)
getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000100), &(0x7f00000000c0)=0x4)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x400)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$NBD_CLEAR_QUE(r2, 0xab05)
ioctl$NBD_CLEAR_QUE(r1, 0xab05)

05:55:05 executing program 2:
clock_gettime(0x4, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000000), 0x1, &(0x7f0000000040))
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000400)=""/191, 0xbf}], 0x2}, 0x10060)

05:55:05 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x9)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00'})
openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
socket(0x18, 0x1, 0x80)
socket$inet_udp(0x2, 0x2, 0x0)

[ 2643.374697][T28852] loop1: detected capacity change from 264192 to 0
05:55:06 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x9)
getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000100), &(0x7f00000000c0)=0x4)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x400)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$NBD_CLEAR_QUE(r1, 0xab05)

05:55:06 executing program 0:
r0 = socket$inet6(0xa, 0x4, 0xa7ea)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r2 = gettid()
pselect6(0x40, &(0x7f0000001300)={0x3f, 0x35f, 0x1000, 0x7, 0xff, 0x5, 0x8, 0xfffffffffffffffc}, &(0x7f0000001340)={0xffffffffffff7e38, 0x4, 0x4, 0x5, 0x8, 0x1ff, 0x2, 0x1}, &(0x7f0000001380)={0xffffffff, 0x4, 0x0, 0x200, 0xe4a5, 0xcd4, 0x7, 0x800}, &(0x7f00000013c0)={0x0, 0x989680}, &(0x7f0000001440)={&(0x7f0000001400)={[0x3ff]}, 0x8})
write$cgroup_pid(r1, &(0x7f0000000180)=r2, 0x12)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="b7ebce542568a4fc6ea1dff69b053d0e0652f4d222faa8859af4f53eb221c4ecd0f555bdaa6cfd33975c1e387c29fdd7db75769c090600d01b5b3d9da0ae1432f5adad7e9d4b063b514a6b1347", @ANYRES16=0x0, @ANYBLOB="00012cbd700100dbdf250c0000002b0002000000000500003b00faff000000000000000000000100000000000000000000000000000000000000000000000000030000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
write$tcp_mem(0xffffffffffffffff, &(0x7f00000000c0)={0xbeef, 0x20, 0x1, 0x20, 0x80}, 0x48)
rt_sigprocmask(0x3, &(0x7f00000001c0)={[0x1]}, &(0x7f0000000200), 0x8)
r3 = gettid()
rt_tgsigqueueinfo(r3, 0x0, 0x2a, &(0x7f00000014c0)={0x27, 0x1})

05:55:06 executing program 2:
clock_gettime(0x4, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f00000004c0)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000400)=""/191, 0xbf}], 0x2}, 0x10060)

05:55:06 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x74000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:06 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x9)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00'})
openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
socket(0x18, 0x1, 0x80)

05:55:06 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0)

05:55:06 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x9)
getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000100), &(0x7f00000000c0)=0x4)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x400)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$NBD_CLEAR_QUE(r1, 0xab05)

05:55:06 executing program 2:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f00000004c0)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000400)=""/191, 0xbf}], 0x2}, 0x10060)

05:55:06 executing program 0:
r0 = socket$inet6(0xa, 0x4, 0xa7ea)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r2 = gettid()
pselect6(0x40, &(0x7f0000001300)={0x3f, 0x35f, 0x1000, 0x7, 0xff, 0x5, 0x8, 0xfffffffffffffffc}, &(0x7f0000001340)={0xffffffffffff7e38, 0x4, 0x4, 0x5, 0x8, 0x1ff, 0x2, 0x1}, &(0x7f0000001380)={0xffffffff, 0x4, 0x0, 0x200, 0xe4a5, 0xcd4, 0x7, 0x800}, &(0x7f00000013c0)={0x0, 0x989680}, &(0x7f0000001440)={&(0x7f0000001400)={[0x3ff]}, 0x8})
write$cgroup_pid(r1, &(0x7f0000000180)=r2, 0x12)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="b7ebce542568a4fc6ea1dff69b053d0e0652f4d222faa8859af4f53eb221c4ecd0f555bdaa6cfd33975c1e387c29fdd7db75769c090600d01b5b3d9da0ae1432f5adad7e9d4b063b514a6b1347", @ANYRES16=0x0, @ANYBLOB="00012cbd700100dbdf250c0000002b0002000000000500003b00faff000000000000000000000100000000000000000000000000000000000000000000000000030000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
write$tcp_mem(0xffffffffffffffff, &(0x7f00000000c0)={0xbeef, 0x20, 0x1, 0x20, 0x80}, 0x48)
rt_sigprocmask(0x3, &(0x7f00000001c0)={[0x1]}, &(0x7f0000000200), 0x8)
r3 = gettid()
rt_tgsigqueueinfo(r3, 0x0, 0x2a, &(0x7f00000014c0)={0x27, 0x1})

[ 2643.847024][T28893] loop1: detected capacity change from 264192 to 0
05:55:06 executing program 2:
socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000400)=""/191, 0xbf}], 0x2}, 0x10060)

05:55:06 executing program 0:
r0 = socket$inet6(0xa, 0x4, 0xa7ea)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r2 = gettid()
pselect6(0x40, &(0x7f0000001300)={0x3f, 0x35f, 0x1000, 0x7, 0xff, 0x5, 0x8, 0xfffffffffffffffc}, &(0x7f0000001340)={0xffffffffffff7e38, 0x4, 0x4, 0x5, 0x8, 0x1ff, 0x2, 0x1}, &(0x7f0000001380)={0xffffffff, 0x4, 0x0, 0x200, 0xe4a5, 0xcd4, 0x7, 0x800}, &(0x7f00000013c0)={0x0, 0x989680}, &(0x7f0000001440)={&(0x7f0000001400)={[0x3ff]}, 0x8})
write$cgroup_pid(r1, &(0x7f0000000180)=r2, 0x12)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="b7ebce542568a4fc6ea1dff69b053d0e0652f4d222faa8859af4f53eb221c4ecd0f555bdaa6cfd33975c1e387c29fdd7db75769c090600d01b5b3d9da0ae1432f5adad7e9d4b063b514a6b1347", @ANYRES16=0x0, @ANYBLOB="00012cbd700100dbdf250c0000002b0002000000000500003b00faff000000000000000000000100000000000000000000000000000000000000000000000000030000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
write$tcp_mem(0xffffffffffffffff, &(0x7f00000000c0)={0xbeef, 0x20, 0x1, 0x20, 0x80}, 0x48)
rt_sigprocmask(0x3, &(0x7f00000001c0)={[0x1]}, &(0x7f0000000200), 0x8)
r3 = gettid()
rt_tgsigqueueinfo(r3, 0x0, 0x2a, &(0x7f00000014c0)={0x27, 0x1})

05:55:06 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x9)
getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000100), &(0x7f00000000c0)=0x4)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x400)
ioctl$NBD_CLEAR_QUE(r1, 0xab05)

05:55:06 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x9)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00'})
openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)

[ 2644.004220][T28893] loop1: detected capacity change from 264192 to 0
05:55:06 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)

05:55:06 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x7a000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:06 executing program 2:
socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000400)=""/191, 0xbf}], 0x2}, 0x10060)

05:55:06 executing program 0:
r0 = socket$inet6(0xa, 0x4, 0xa7ea)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r2 = gettid()
pselect6(0x40, &(0x7f0000001300)={0x3f, 0x35f, 0x1000, 0x7, 0xff, 0x5, 0x8, 0xfffffffffffffffc}, &(0x7f0000001340)={0xffffffffffff7e38, 0x4, 0x4, 0x5, 0x8, 0x1ff, 0x2, 0x1}, &(0x7f0000001380)={0xffffffff, 0x4, 0x0, 0x200, 0xe4a5, 0xcd4, 0x7, 0x800}, &(0x7f00000013c0)={0x0, 0x989680}, &(0x7f0000001440)={&(0x7f0000001400)={[0x3ff]}, 0x8})
write$cgroup_pid(r1, &(0x7f0000000180)=r2, 0x12)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="b7ebce542568a4fc6ea1dff69b053d0e0652f4d222faa8859af4f53eb221c4ecd0f555bdaa6cfd33975c1e387c29fdd7db75769c090600d01b5b3d9da0ae1432f5adad7e9d4b063b514a6b1347", @ANYRES16=0x0, @ANYBLOB="00012cbd700100dbdf250c0000002b0002000000000500003b00faff000000000000000000000100000000000000000000000000000000000000000000000000030000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
write$tcp_mem(0xffffffffffffffff, &(0x7f00000000c0)={0xbeef, 0x20, 0x1, 0x20, 0x80}, 0x48)
rt_sigprocmask(0x3, &(0x7f00000001c0)={[0x1]}, &(0x7f0000000200), 0x8)
r3 = gettid()
rt_tgsigqueueinfo(0x0, r3, 0x2a, &(0x7f00000014c0)={0x27, 0x1})

05:55:06 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x9)
getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000100), &(0x7f00000000c0)=0x4)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05)

05:55:06 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)

[ 2644.317596][T28932] loop1: detected capacity change from 264192 to 0
05:55:06 executing program 4:
socket$inet6(0xa, 0x3, 0x9)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00'})

05:55:06 executing program 2:
socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000400)=""/191, 0xbf}], 0x2}, 0x10060)

05:55:06 executing program 0:
r0 = socket$inet6(0xa, 0x4, 0xa7ea)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r2 = gettid()
pselect6(0x40, &(0x7f0000001300)={0x3f, 0x35f, 0x1000, 0x7, 0xff, 0x5, 0x8, 0xfffffffffffffffc}, &(0x7f0000001340)={0xffffffffffff7e38, 0x4, 0x4, 0x5, 0x8, 0x1ff, 0x2, 0x1}, &(0x7f0000001380)={0xffffffff, 0x4, 0x0, 0x200, 0xe4a5, 0xcd4, 0x7, 0x800}, &(0x7f00000013c0)={0x0, 0x989680}, &(0x7f0000001440)={&(0x7f0000001400)={[0x3ff]}, 0x8})
write$cgroup_pid(r1, &(0x7f0000000180)=r2, 0x12)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="b7ebce542568a4fc6ea1dff69b053d0e0652f4d222faa8859af4f53eb221c4ecd0f555bdaa6cfd33975c1e387c29fdd7db75769c090600d01b5b3d9da0ae1432f5adad7e9d4b063b514a6b1347", @ANYRES16=0x0, @ANYBLOB="00012cbd700100dbdf250c0000002b0002000000000500003b00faff000000000000000000000100000000000000000000000000000000000000000000000000030000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
write$tcp_mem(0xffffffffffffffff, &(0x7f00000000c0)={0xbeef, 0x20, 0x1, 0x20, 0x80}, 0x48)
rt_sigprocmask(0x3, &(0x7f00000001c0)={[0x1]}, &(0x7f0000000200), 0x8)
r3 = gettid()
rt_tgsigqueueinfo(0x0, r3, 0x2a, &(0x7f00000014c0)={0x27, 0x1})

[ 2644.396707][T28932] loop1: detected capacity change from 264192 to 0
05:55:07 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x8cffffff, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:07 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x9)
getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000100), &(0x7f00000000c0)=0x4)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05)

05:55:07 executing program 2:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, 0x0, 0x10060)

05:55:07 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

05:55:07 executing program 4:
socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'})

05:55:07 executing program 0:
r0 = socket$inet6(0xa, 0x4, 0xa7ea)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r2 = gettid()
pselect6(0x40, &(0x7f0000001300)={0x3f, 0x35f, 0x1000, 0x7, 0xff, 0x5, 0x8, 0xfffffffffffffffc}, &(0x7f0000001340)={0xffffffffffff7e38, 0x4, 0x4, 0x5, 0x8, 0x1ff, 0x2, 0x1}, &(0x7f0000001380)={0xffffffff, 0x4, 0x0, 0x200, 0xe4a5, 0xcd4, 0x7, 0x800}, &(0x7f00000013c0)={0x0, 0x989680}, &(0x7f0000001440)={&(0x7f0000001400)={[0x3ff]}, 0x8})
write$cgroup_pid(r1, &(0x7f0000000180)=r2, 0x12)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="b7ebce542568a4fc6ea1dff69b053d0e0652f4d222faa8859af4f53eb221c4ecd0f555bdaa6cfd33975c1e387c29fdd7db75769c090600d01b5b3d9da0ae1432f5adad7e9d4b063b514a6b1347", @ANYRES16=0x0, @ANYBLOB="00012cbd700100dbdf250c0000002b0002000000000500003b00faff000000000000000000000100000000000000000000000000000000000000000000000000030000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
write$tcp_mem(0xffffffffffffffff, &(0x7f00000000c0)={0xbeef, 0x20, 0x1, 0x20, 0x80}, 0x48)
rt_sigprocmask(0x3, &(0x7f00000001c0)={[0x1]}, &(0x7f0000000200), 0x8)
r3 = gettid()
rt_tgsigqueueinfo(0x0, r3, 0x2a, &(0x7f00000014c0)={0x27, 0x1})

05:55:07 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x9)
getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000100), &(0x7f00000000c0)=0x4)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05)

[ 2644.683053][T28961] loop1: detected capacity change from 264192 to 0
05:55:07 executing program 2:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, 0x0, 0x10060)

[ 2644.805638][T28961] loop1: detected capacity change from 264192 to 0
05:55:07 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:07 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x97ffffff, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:07 executing program 0:
r0 = socket$inet6(0xa, 0x4, 0xa7ea)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r2 = gettid()
pselect6(0x40, &(0x7f0000001300)={0x3f, 0x35f, 0x1000, 0x7, 0xff, 0x5, 0x8, 0xfffffffffffffffc}, &(0x7f0000001340)={0xffffffffffff7e38, 0x4, 0x4, 0x5, 0x8, 0x1ff, 0x2, 0x1}, &(0x7f0000001380)={0xffffffff, 0x4, 0x0, 0x200, 0xe4a5, 0xcd4, 0x7, 0x800}, &(0x7f00000013c0)={0x0, 0x989680}, &(0x7f0000001440)={&(0x7f0000001400)={[0x3ff]}, 0x8})
write$cgroup_pid(r1, &(0x7f0000000180)=r2, 0x12)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="b7ebce542568a4fc6ea1dff69b053d0e0652f4d222faa8859af4f53eb221c4ecd0f555bdaa6cfd33975c1e387c29fdd7db75769c090600d01b5b3d9da0ae1432f5adad7e9d4b063b514a6b1347", @ANYRES16=0x0, @ANYBLOB="00012cbd700100dbdf250c0000002b0002000000000500003b00faff000000000000000000000100000000000000000000000000000000000000000000000000030000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
write$tcp_mem(0xffffffffffffffff, &(0x7f00000000c0)={0xbeef, 0x20, 0x1, 0x20, 0x80}, 0x48)
r3 = gettid()
r4 = gettid()
rt_tgsigqueueinfo(r3, r4, 0x2a, &(0x7f00000014c0)={0x27, 0x1})

05:55:07 executing program 4:
socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'})

05:55:07 executing program 3:
socket$inet6(0xa, 0x3, 0x9)
getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000100), &(0x7f00000000c0)=0x4)
r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x400)
ioctl$NBD_CLEAR_QUE(r0, 0xab05)

05:55:07 executing program 2:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, 0x0, 0x10060)

05:55:07 executing program 0:
r0 = socket$inet6(0xa, 0x4, 0xa7ea)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r2 = gettid()
pselect6(0x40, &(0x7f0000001300)={0x3f, 0x35f, 0x1000, 0x7, 0xff, 0x5, 0x8, 0xfffffffffffffffc}, &(0x7f0000001340)={0xffffffffffff7e38, 0x4, 0x4, 0x5, 0x8, 0x1ff, 0x2, 0x1}, &(0x7f0000001380)={0xffffffff, 0x4, 0x0, 0x200, 0xe4a5, 0xcd4, 0x7, 0x800}, &(0x7f00000013c0)={0x0, 0x989680}, &(0x7f0000001440)={&(0x7f0000001400)={[0x3ff]}, 0x8})
write$cgroup_pid(r1, &(0x7f0000000180)=r2, 0x12)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="b7ebce542568a4fc6ea1dff69b053d0e0652f4d222faa8859af4f53eb221c4ecd0f555bdaa6cfd33975c1e387c29fdd7db75769c090600d01b5b3d9da0ae1432f5adad7e9d4b063b514a6b1347", @ANYRES16=0x0, @ANYBLOB="00012cbd700100dbdf250c0000002b0002000000000500003b00faff000000000000000000000100000000000000000000000000000000000000000000000000030000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
r3 = gettid()
r4 = gettid()
rt_tgsigqueueinfo(r3, r4, 0x2a, &(0x7f00000014c0)={0x27, 0x1})

[ 2645.078218][T28989] loop1: detected capacity change from 264192 to 0
05:55:07 executing program 4:
socket$inet6(0xa, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'})

05:55:07 executing program 5:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:07 executing program 4:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00'})

[ 2645.185842][T28989] loop1: detected capacity change from 264192 to 0
05:55:07 executing program 2:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000400)=""/191, 0xbf}], 0x2}, 0x10060)

05:55:07 executing program 3:
socket$inet6(0xa, 0x3, 0x9)
r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x400)
ioctl$NBD_CLEAR_QUE(r0, 0xab05)

05:55:07 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x9cd416ee, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:07 executing program 0:
r0 = socket$inet6(0xa, 0x4, 0xa7ea)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r2 = gettid()
pselect6(0x40, &(0x7f0000001300)={0x3f, 0x35f, 0x1000, 0x7, 0xff, 0x5, 0x8, 0xfffffffffffffffc}, &(0x7f0000001340)={0xffffffffffff7e38, 0x4, 0x4, 0x5, 0x8, 0x1ff, 0x2, 0x1}, &(0x7f0000001380)={0xffffffff, 0x4, 0x0, 0x200, 0xe4a5, 0xcd4, 0x7, 0x800}, &(0x7f00000013c0)={0x0, 0x989680}, &(0x7f0000001440)={&(0x7f0000001400)={[0x3ff]}, 0x8})
write$cgroup_pid(r1, &(0x7f0000000180)=r2, 0x12)
r3 = gettid()
r4 = gettid()
rt_tgsigqueueinfo(r3, r4, 0x2a, &(0x7f00000014c0)={0x27, 0x1})

05:55:07 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:08 executing program 2:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x10060)

[ 2645.491347][T29024] loop1: detected capacity change from 264192 to 0
05:55:08 executing program 3:
r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x400)
ioctl$NBD_CLEAR_QUE(r0, 0xab05)

05:55:08 executing program 0:
r0 = socket$inet6(0xa, 0x4, 0xa7ea)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
gettid()
pselect6(0x40, &(0x7f0000001300)={0x3f, 0x35f, 0x1000, 0x7, 0xff, 0x5, 0x8, 0xfffffffffffffffc}, &(0x7f0000001340)={0xffffffffffff7e38, 0x4, 0x4, 0x5, 0x8, 0x1ff, 0x2, 0x1}, &(0x7f0000001380)={0xffffffff, 0x4, 0x0, 0x200, 0xe4a5, 0xcd4, 0x7, 0x800}, &(0x7f00000013c0)={0x0, 0x989680}, &(0x7f0000001440)={&(0x7f0000001400)={[0x3ff]}, 0x8})
r1 = gettid()
r2 = gettid()
rt_tgsigqueueinfo(r1, r2, 0x2a, &(0x7f00000014c0)={0x27, 0x1})

05:55:08 executing program 4:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'})

05:55:08 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

[ 2645.578075][T29024] loop1: detected capacity change from 264192 to 0
05:55:08 executing program 4:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'})

05:55:08 executing program 0:
r0 = socket$inet6(0xa, 0x4, 0xa7ea)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
gettid()
r1 = gettid()
r2 = gettid()
rt_tgsigqueueinfo(r1, r2, 0x2a, &(0x7f00000014c0)={0x27, 0x1})

05:55:08 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xc0ed0000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:08 executing program 2:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)

05:55:08 executing program 3:
r0 = syz_open_dev$ndb(0x0, 0x0, 0x400)
ioctl$NBD_CLEAR_QUE(r0, 0xab05)

05:55:08 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:08 executing program 0:
r0 = socket$inet6(0xa, 0x4, 0xa7ea)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r1 = gettid()
r2 = gettid()
rt_tgsigqueueinfo(r1, r2, 0x2a, &(0x7f00000014c0)={0x27, 0x1})

05:55:08 executing program 4:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'})

[ 2645.920460][T29053] loop1: detected capacity change from 264192 to 0
05:55:08 executing program 5:
syz_io_uring_setup(0x3fda, 0x0, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:08 executing program 3:
r0 = syz_open_dev$ndb(0x0, 0x0, 0x400)
ioctl$NBD_CLEAR_QUE(r0, 0xab05)

[ 2646.031854][T29053] loop1: detected capacity change from 264192 to 0
05:55:08 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xee16d49c, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:08 executing program 0:
socket$inet6(0xa, 0x4, 0xa7ea)
r0 = gettid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x2a, &(0x7f00000014c0)={0x27, 0x1})

05:55:08 executing program 3:
r0 = syz_open_dev$ndb(0x0, 0x0, 0x400)
ioctl$NBD_CLEAR_QUE(r0, 0xab05)

05:55:08 executing program 4:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)

05:55:08 executing program 5:
syz_io_uring_setup(0x3fda, 0x0, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

[ 2646.323221][T29079] loop1: detected capacity change from 264192 to 0
[ 2646.427151][T29079] loop1: detected capacity change from 264192 to 0
05:55:09 executing program 2:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)

05:55:09 executing program 0:
r0 = gettid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x2a, &(0x7f00000014c0)={0x27, 0x1})

05:55:09 executing program 5:
syz_io_uring_setup(0x3fda, 0x0, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:09 executing program 3:
r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_QUE(r0, 0xab05)

05:55:09 executing program 4:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)

05:55:09 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xf0ffffff, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

[ 2646.782972][T29100] loop1: detected capacity change from 264192 to 0
05:55:09 executing program 5:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:09 executing program 4:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)

05:55:09 executing program 3:
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05)

05:55:09 executing program 0:
gettid()
r0 = gettid()
rt_tgsigqueueinfo(0x0, r0, 0x2a, &(0x7f00000014c0)={0x27, 0x1})

[ 2646.891289][T29100] loop1: detected capacity change from 264192 to 0
05:55:09 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xf6ffffff, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:09 executing program 5:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

[ 2647.158533][T29120] loop1: detected capacity change from 264192 to 0
[ 2647.221633][T29120] loop1: detected capacity change from 264192 to 0
05:55:10 executing program 3:
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05)

05:55:10 executing program 2:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)

05:55:10 executing program 0:
gettid()
r0 = gettid()
rt_tgsigqueueinfo(0x0, r0, 0x2a, &(0x7f00000014c0)={0x27, 0x1})

05:55:10 executing program 4:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)

05:55:10 executing program 5:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:10 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xfcfdffff, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:10 executing program 0:
gettid()
r0 = gettid()
rt_tgsigqueueinfo(0x0, r0, 0x2a, &(0x7f00000014c0)={0x27, 0x1})

05:55:10 executing program 5:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x0, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

[ 2647.845966][T29144] loop1: detected capacity change from 264192 to 0
05:55:10 executing program 4:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x9cd416ee, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:10 executing program 3:
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05)

05:55:10 executing program 0:
r0 = gettid()
gettid()
rt_tgsigqueueinfo(r0, 0x0, 0x2a, &(0x7f00000014c0)={0x27, 0x1})

[ 2647.976263][T29144] loop1: detected capacity change from 264192 to 0
05:55:10 executing program 5:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x0, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:10 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xfdfdffff, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

[ 2648.110946][T29165] loop4: detected capacity change from 264192 to 0
[ 2648.257109][T29172] loop1: detected capacity change from 264192 to 0
[ 2648.324161][T29172] loop1: detected capacity change from 264192 to 0
05:55:11 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xfdffffff, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:11 executing program 3:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xfcfdffff, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:11 executing program 0:
r0 = gettid()
gettid()
rt_tgsigqueueinfo(r0, 0x0, 0x2a, &(0x7f00000014c0)={0x27, 0x1})

05:55:11 executing program 4:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00'})

05:55:11 executing program 5:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x0, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:11 executing program 2:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)

05:55:11 executing program 0:
r0 = gettid()
gettid()
rt_tgsigqueueinfo(r0, 0x0, 0x2a, &(0x7f00000014c0)={0x27, 0x1})

[ 2648.751547][T29195] loop3: detected capacity change from 264192 to 0
[ 2648.783389][T29194] loop1: detected capacity change from 264192 to 0
05:55:11 executing program 5:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x0, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:11 executing program 4:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x0, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

[ 2648.895577][T29194] loop1: detected capacity change from 264192 to 0
05:55:11 executing program 3:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x8cffffff, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:11 executing program 0:
r0 = gettid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f00000014c0)={0x27, 0x1})

05:55:11 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xfeffffff, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:11 executing program 5:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

[ 2649.123593][T29230] loop3: detected capacity change from 264192 to 0
05:55:11 executing program 4:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x0, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:11 executing program 0:
r0 = gettid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x0, 0x0)

[ 2649.189840][T29232] loop1: detected capacity change from 264192 to 0
05:55:11 executing program 3:
clock_gettime(0xd4e8863c0000000b, 0x0)
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

[ 2649.302554][T29232] loop1: detected capacity change from 264192 to 0
05:55:11 executing program 5:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, 0x0, &(0x7f0000000140))

05:55:12 executing program 2:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:12 executing program 4:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x0, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:12 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xff000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:12 executing program 0:
r0 = gettid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x0, 0x0)

05:55:12 executing program 3:
clock_gettime(0xd4e8863c0000000b, 0x0)
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

05:55:12 executing program 5:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, 0x0, &(0x7f0000000140))

05:55:12 executing program 0:
r0 = gettid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x0, 0x0)

05:55:12 executing program 4:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x0, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

[ 2649.727745][T29276] loop1: detected capacity change from 264192 to 0
05:55:12 executing program 2:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

[ 2649.849071][T29276] loop1: detected capacity change from 264192 to 0
05:55:12 executing program 3:
clock_gettime(0xd4e8863c0000000b, 0x0)
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

05:55:12 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xfffffdfc, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:12 executing program 5:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, 0x0, &(0x7f0000000140))

05:55:12 executing program 0:
r0 = gettid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f00000014c0)={0x0, 0x1})

05:55:12 executing program 0:
r0 = gettid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f00000014c0))

05:55:12 executing program 0:
clock_gettime(0xd4e8863c0000000b, 0x0)
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)

05:55:12 executing program 5:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), 0x0)

05:55:12 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x0, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

[ 2650.255104][T29323] loop1: detected capacity change from 264192 to 0
05:55:12 executing program 3:
clock_gettime(0xd4e8863c0000000b, 0x0)
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:12 executing program 2:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

[ 2650.361473][T29323] loop1: detected capacity change from 264192 to 0
05:55:12 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x0, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:12 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xfffffdfd, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:13 executing program 0:
clock_gettime(0xd4e8863c0000000b, 0x0)
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)

05:55:13 executing program 5:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), 0x0)

05:55:13 executing program 2:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:13 executing program 3:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:13 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x0, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

[ 2650.631452][T29361] loop1: detected capacity change from 264192 to 0
05:55:13 executing program 2:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

[ 2650.738904][T29361] loop1: detected capacity change from 264192 to 0
05:55:13 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:13 executing program 5:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), 0x0)

05:55:13 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xffffff8c, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:13 executing program 4:
syz_io_uring_setup(0x3fda, 0x0, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:13 executing program 0:
clock_gettime(0xd4e8863c0000000b, 0x0)
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)

05:55:13 executing program 2:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

[ 2651.008584][T29398] loop1: detected capacity change from 264192 to 0
05:55:13 executing program 4:
syz_io_uring_setup(0x3fda, 0x0, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:13 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:13 executing program 5:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), 0x0)

05:55:13 executing program 2:
syz_io_uring_setup(0x3fda, 0x0, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:13 executing program 0:
clock_gettime(0xd4e8863c0000000b, 0x0)
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

[ 2651.156909][T29398] loop1: detected capacity change from 264192 to 0
05:55:13 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:13 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xffffff97, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:13 executing program 4:
syz_io_uring_setup(0x3fda, 0x0, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:13 executing program 5:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), 0x0)

[ 2651.419782][T29434] loop1: detected capacity change from 264192 to 0
05:55:14 executing program 0:
clock_gettime(0xd4e8863c0000000b, 0x0)
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:14 executing program 2:
syz_io_uring_setup(0x3fda, 0x0, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:14 executing program 3:
syz_io_uring_setup(0x3fda, 0x0, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:14 executing program 4:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

[ 2651.556254][T29434] loop1: detected capacity change from 264192 to 0
05:55:14 executing program 4:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:14 executing program 3:
syz_io_uring_setup(0x3fda, 0x0, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:14 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xfffffff0, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:14 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:14 executing program 0:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:14 executing program 4:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:14 executing program 2:
syz_io_uring_setup(0x3fda, 0x0, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:14 executing program 3:
syz_io_uring_setup(0x3fda, 0x0, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

[ 2651.926628][T29469] loop1: detected capacity change from 264192 to 0
05:55:14 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:14 executing program 2:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x0, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:14 executing program 0:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

[ 2652.077024][T29469] loop1: detected capacity change from 264192 to 0
05:55:14 executing program 3:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:14 executing program 0:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:14 executing program 4:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x0, 0x0, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:14 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xfffffff6, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:14 executing program 3:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:14 executing program 5:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:14 executing program 2:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x0, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:14 executing program 0:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:15 executing program 4:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x0, 0x0, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

[ 2652.503465][T29511] loop1: detected capacity change from 264192 to 0
05:55:15 executing program 2:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x0, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

[ 2652.595740][T29511] loop1: detected capacity change from 264192 to 0
05:55:15 executing program 3:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:15 executing program 0:
syz_io_uring_setup(0x3fda, 0x0, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:15 executing program 5:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x0, 0x0, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:15 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffd, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:15 executing program 2:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:15 executing program 4:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x0, 0x0, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:15 executing program 3:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x0, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:15 executing program 0:
syz_io_uring_setup(0x3fda, 0x0, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:15 executing program 5:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xfffffff6, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

[ 2652.970239][T29550] loop1: detected capacity change from 264192 to 0
05:55:15 executing program 2:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:15 executing program 0:
syz_io_uring_setup(0x3fda, 0x0, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:15 executing program 3:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x0, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

[ 2653.108510][T29550] loop1: detected capacity change from 264192 to 0
05:55:15 executing program 4:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:15 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffe, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

[ 2653.284569][T29574] loop5: detected capacity change from 264192 to 0
05:55:15 executing program 2:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:15 executing program 0:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:16 executing program 3:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x0, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:16 executing program 4:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, 0x0, &(0x7f0000000140))

05:55:16 executing program 5:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x0, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:16 executing program 0:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

[ 2653.559501][T29597] loop1: detected capacity change from 264192 to 0
[ 2653.647697][T29597] loop1: detected capacity change from 264192 to 0
05:55:16 executing program 2:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, 0x0, &(0x7f0000000140))

05:55:16 executing program 4:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, 0x0, &(0x7f0000000140))

05:55:16 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xedc000000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:16 executing program 5:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:16 executing program 3:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x0, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:16 executing program 0:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:16 executing program 4:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, 0x0, &(0x7f0000000140))

05:55:16 executing program 2:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, 0x0, &(0x7f0000000140))

05:55:16 executing program 5:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x0, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

[ 2653.983182][T29646] loop1: detected capacity change from 264192 to 0
05:55:16 executing program 3:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:16 executing program 0:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x0, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

[ 2654.099030][T29646] loop1: detected capacity change from 264192 to 0
05:55:16 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x1000000000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:16 executing program 2:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, 0x0, &(0x7f0000000140))

05:55:16 executing program 4:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), 0x0)

05:55:16 executing program 5:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:16 executing program 3:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, 0x0, &(0x7f0000000140))

05:55:16 executing program 0:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x0, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:17 executing program 4:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), 0x0)

[ 2654.482184][T29691] loop1: detected capacity change from 264192 to 0
[ 2654.576968][T29691] loop1: detected capacity change from 264192 to 0
05:55:17 executing program 2:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), 0x0)

05:55:17 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x2000000000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:17 executing program 0:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x0, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:17 executing program 3:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, 0x0, &(0x7f0000000140))

05:55:17 executing program 5:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, 0x0, &(0x7f0000000140))

05:55:17 executing program 4:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), 0x0)

[ 2654.803431][T29727] loop1: detected capacity change from 264192 to 0
05:55:17 executing program 5:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x1000000000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

[ 2654.882664][T29727] loop1: detected capacity change from 264192 to 0
05:55:17 executing program 0:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x0, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:17 executing program 2:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), 0x0)

05:55:17 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x100000000000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:17 executing program 4:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x0, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:17 executing program 3:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, 0x0, &(0x7f0000000140))

[ 2655.076157][T29758] loop5: detected capacity change from 264192 to 0
[ 2655.187081][T29775] loop1: detected capacity change from 264192 to 0
05:55:17 executing program 0:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:17 executing program 5:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), 0x0)

05:55:17 executing program 3:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), 0x0)

[ 2655.237987][T29775] loop1: detected capacity change from 264192 to 0
05:55:17 executing program 4:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, 0x0, &(0x7f0000000140))

05:55:17 executing program 2:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), 0x0)

05:55:17 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x200000000000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:18 executing program 0:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, 0x0, &(0x7f0000000140))

05:55:18 executing program 5:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:18 executing program 4:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), 0x0)

05:55:18 executing program 2:
clock_gettime(0xd4e8863c0000000b, 0x0)
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)

05:55:18 executing program 3:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), 0x0)

[ 2655.648565][T29819] loop1: detected capacity change from 264192 to 0
05:55:18 executing program 0:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, 0x0, &(0x7f0000000140))

[ 2655.750948][T29819] loop1: detected capacity change from 264192 to 0
05:55:18 executing program 5:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, 0x0, &(0x7f0000000140))

05:55:18 executing program 0:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, 0x0, &(0x7f0000000140))

05:55:18 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x300000000000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:18 executing program 4:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x74000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:18 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x9)
getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000100), &(0x7f00000000c0)=0x4)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x400)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$NBD_CLEAR_QUE(r1, 0xab05)

05:55:18 executing program 3:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), 0x0)

05:55:18 executing program 0:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), 0x0)

05:55:18 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8, 0x3, 0x39}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100)=<r0=>0x0, &(0x7f0000000140))
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0)
syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r1, 0xe812, {0x0, r2}, 0xe7e, 0x0, 0x1, {0x0, 0x0, r3}}, 0x9b31)
clock_gettime(0x0, &(0x7f0000000000))

05:55:18 executing program 2:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x68000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

[ 2656.098522][T29870] loop1: detected capacity change from 264192 to 0
[ 2656.136455][T29872] loop4: detected capacity change from 264192 to 0
05:55:18 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x9)
getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000100), &(0x7f00000000c0)=0x4)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x400)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$NBD_CLEAR_QUE(r2, 0xab05)
ioctl$NBD_CLEAR_QUE(r1, 0xab05)

[ 2656.239084][T29870] loop1: detected capacity change from 264192 to 0
05:55:19 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x400000000000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:19 executing program 3:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), 0x0)

05:55:19 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x48400, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0x2, 0x4}, 0x6)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r3 = userfaultfd(0x80800)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0xb})
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000008, 0x11, r0, 0x83000000)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100))
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$CAPI_GET_SERIAL(r2, 0xc0044308, &(0x7f0000000000)=0x2)
r4 = syz_open_dev$vim2m(&(0x7f0000000280)='/dev/video#\x00', 0xe3d0, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f00000002c0)={0x1, 0x2, 0x4, 0x10000, 0x7, {0x0, 0x2710}, {0x2, 0xe, 0x80, 0x5, 0x3, 0x4, "a7c59baf"}, 0x96, 0x1, @userptr=0x7, 0x9, 0x0, r2})
r5 = getpgrp(0xffffffffffffffff)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0)
wait4(r5, 0x0, 0x0, 0x0)
rt_sigqueueinfo(r5, 0x1, &(0x7f0000000380)={0x1f, 0x0, 0x5})
socket$nl_generic(0x10, 0x3, 0x10)

05:55:19 executing program 0:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), 0x0)

05:55:19 executing program 4:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), 0x0)

05:55:19 executing program 2:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x300, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:19 executing program 0:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), 0x0)

[ 2656.738392][T29913] loop1: detected capacity change from 264192 to 0
05:55:19 executing program 3:
timer_create(0x2, &(0x7f0000000000)={0x0, 0x6, 0x1}, &(0x7f0000000040)=<r0=>0x0)
timer_delete(r0)
r1 = socket$inet6(0xa, 0x3, 0x9)
openat$cgroup_procs(r1, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)

05:55:19 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x48400, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0x2, 0x4}, 0x6)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r3 = userfaultfd(0x80800)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0xb})
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000008, 0x11, r0, 0x83000000)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100))
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$CAPI_GET_SERIAL(r2, 0xc0044308, &(0x7f0000000000)=0x2)
r4 = syz_open_dev$vim2m(&(0x7f0000000280)='/dev/video#\x00', 0xe3d0, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f00000002c0)={0x1, 0x2, 0x4, 0x10000, 0x7, {0x0, 0x2710}, {0x2, 0xe, 0x80, 0x5, 0x3, 0x4, "a7c59baf"}, 0x96, 0x1, @userptr=0x7, 0x9, 0x0, r2})
r5 = getpgrp(0xffffffffffffffff)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0)
wait4(r5, 0x0, 0x0, 0x0)
rt_sigqueueinfo(r5, 0x1, &(0x7f0000000380)={0x1f, 0x0, 0x5})
socket$nl_generic(0x10, 0x3, 0x10)

[ 2656.835161][T29913] loop1: detected capacity change from 264192 to 0
05:55:19 executing program 4:
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), 0x0)

05:55:19 executing program 0:
clock_gettime(0xd4e8863c12c8ef23, 0x0)
r0 = syz_io_uring_setup(0x7507, &(0x7f00000000c0)={0x0, 0xf83c, 0x4, 0x1, 0x1de}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r1 = syz_mount_image$cramfs(&(0x7f00000001c0)='cramfs\x00', &(0x7f0000000200)='./file0\x00', 0x752, 0xa, &(0x7f00000026c0)=[{&(0x7f0000000240)="ca6587696dbf80d5fb63738186caf11609a9d91aea3443ddea2692558cd86fe9dc6e1d6078283544b380dcf61bd90ac6dd2d9f48447422ddec5dbb570dcfbfac4754e1371515a6c8606098a6379a75ebc8230b7f7175c9846d5b48bc0421321db5491a57ba4c21548404c2ff4ec1fd3412f70789841741a9603935768555af70b8", 0x81, 0xfeb}, {&(0x7f0000000300)="c4a238eb04d12e6340670ffccfddc45966a464171e01ecc788f4b374d2f5e134a3c528d1e30c1f3da0a638d1585bf14e6ecc1a435a41df0c20ce94c69778966e08e326ed5df111c8a8c1bec0fb4ef558f3266b33875a7552b8512b4c", 0x5c, 0xff}, {&(0x7f0000000380)="2289f9835b6737b7c4634b3ea19f1649b35c84ac91806ae39408268305c2d33fa17158a99c8cb0e219f8c5415c77297f9de901fbb3d1e3c51a2db5775e5dd6bcbd0a6d55cdf9152672068159ff18ca3410e22e2af71a65931538e58654462b9ff264d218e34686eafd427ca8ee759c7798c29fd9", 0x74, 0x1}, {&(0x7f0000000400)="7721f3adcad3209fe5f53202ae816edc738b397e64aaf23ce7cfdffd899870678c17140b5304013fbfff43b91135b491cb091c3c6fb27e51527b69fa4e5d10550183b36ebd633a96f8ce52c867fa3b9dec7151f7824e", 0x56, 0x3}, {&(0x7f0000000480)="8ea1ebd4e9482f895b3990e21e0c307f62aaa9a7afab94aec93ade05b94e4aa03ab152683595ad", 0x27, 0xfffffffffffffff7}, {&(0x7f00000004c0)="2c43a89ad91470bc53181a5b96345dd152c7c06c6845455d0f42317418523ad7e6ef65", 0x23, 0x6}, {&(0x7f0000000500)="aaf721c6c46191d4879219152e735c276c4ac03caf643fb6bc6e7a4c8d680da79f5632b5b95f9131b5365f0c9406ba040c5399e915055fe2c88a06c8f50479cd40d8631b824d71c40273df8ca52072dd8a0d1ca506512a98c6e8c661fd62cb2a4c48d429a9b3dea59c47e73968661eacef665fc4bb3cb8e0a54027385f68ec8a1a17e68760a451b86d4f07b6d23f48ee23f41ad7e8c5420b6131871e38fd88151d87b74c53578b6748fc9b218348ff0cd29db68d71b2059d13f79b44a2f00dbd0b0ef09ac6d58d4305e3", 0xca, 0xf1eb}, {&(0x7f0000000600)="12a307df156a87368174697ed1c2de74d657d008d06bbd218ffaf4be522cee8f4e20c193dbb0c28724692f11c53bb0cbd145eed38c6343907ff0e08b68b81c14b9b985fbf2c5a06fa3c615789896ee8a7737d39a9e18ee6e16629103068dea791daad0d3554ca9bff08a67958cbe7d7d1d2be3e78a5e456a675d236acd8946347a13b220799c5f298e226d905bf1e1bf3407a1f724bf", 0x96}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="edd3a32b6543f8aea1395ee8cbbed297aa602c06b5a1ba1043523f0bbd81891e3feee3b3b12dbe8c2ec3298823bfcfa188b5639a5c8731b39a3e5cbcf0f77e67b524615a8525b74eef571080c1f08060c1d59d7b6ab73b3ae0b56c288fe0854c37f1c857ce8980c556c415d9eee3cef3807b1883d779aa7697df7a44aaae6a852f9af3206886fa0595ea0e77c722d6a8a85902837ae7c180b5d9690cc553025b619a0bec6d4a03d9c6f441554d50f3208b23cb0f83443ef86173b66a8d6bd30d62be6599f8f7ab53711df6016fd73ab56f9dcd57ef1e466e9ccfaf45378f40bab3b63845085b82c4711e5e4218e97b45e3952769d0c9b1ec8e1a5a6892528d1c57a0b8fea241556610b061924b61f7ada0e02c2731ab0770403c139c68f5caa682129b640806b7983c6dc4168c382e1b07f2c0b7726d294444489233eb662c24b3b136b91c05dc089491afb65c78b55fd49087176cc6e0fddb6577bcfbebd2a62a5b341827a91cadc32280492ebd3ed8bc6909d1aa5a62ecad38328914853f79d305d8f7f204faa77637d197ec74b8f0468715dd63a97e70d72453c85d684b1f2f60dd7c18b66f28685ba059ce180417f6588b448a8f209dc928ba54202a48fe50c54609dbd0047b0aee55ba78284d37d86b526ace2196a5bf205ff23c9ce49a96daabb801f1d7f2a40ee5bac949b3648f2b0f7132a8492c38023aa9e53cbf39ba853e62898b675ef57d87d56a32345cbe2342e41555fb7cc76238f154b030e8a084620447189b70e65472537a4a19bc94a5bab3c29f3aadeaef6a7b1eafdf5be0b0dd30288a98a43224cfa53936f3969260409d373cffdfc6784a66b02a31a23277bced5a657581363a4d427bcd837d075761e9bae1ba6000032d3ecbb7db7ec69f1cbaff69e791afd7c05649e427c72e369f357e24b794e6d3f3c28e6bdb6d14a8e19b031bf86dc8e8a414b9ddc80cf4cddc473353f14fddd483303954643c09bfb05acd0a557662df01a838ee1ec97968491d8286479c5a84330068e2ae7dd2cb8cbaf0c8262b8fce97261513458df3985e269fc2728ccb0d1bab0ecca415ff9a187cbb36810f207a5887fad85d4a5d8695c1a7c783c8d1abe714413d3f971b23bc3bdbc1a96c99bd63a7c88e669f866edb51228e87383f9699a9e2ba05cc73ccebc30e4464abcb4932826599f4c2f10819adfada7727be8c8c61f8c6534b364a5ee2de8ca2108f280a96c7a7d7d2825f9fed9861d6b5bd4ad6b53845740590a2bb6aef727af6cec419ba76f9d3e37187578f2828ad2bd9410aabbc7508da7965f0bc3b5b2d4c25958a503a43caaffe9cbf4e61e319d4d33fa4a0ff8b84f36828e603f14f00b4725e1eb2ee782c20a513915ab430f603ae9468162e7768f1ce52603b217c2dbed32c1b1f7421d2f504e7a9ef646f39fd50e397f48e613275eed01476dc0febdae76c67eac313e39b6d8bdea20cdcd34b37dbce78b242d6ad10a38f7192ac428db727665f3c8e7517026e8d8b5c7166698cf9af9f44ad29fc7a3226dd43f9802b47255163f3951f94f8823e1d6b57719cad06f317bf24d3ae482f6ba23861386ca44562f6942d23116e792e7438d9086972c7195f47f8907857e463e70533d2bd09309d5100520208aa4a567e092a1f64e5384037695555b4934eb88019c1cde050a8e744e2af0b9a3bba0227f83b3af3c470fb3a7a6ce5fd27ba891ab4d664500e20811f6e83098c4aca12a1e5abb001b7a09dea69caf7f3c0c2cd90c49cc1a6da6febb1fa553f97286e87de60d9101391c7efaa8b508ee79de683ac0b5cdd01e5f4f750d2576d2643ca1848c9ce5ec8af6a9ca03e284fed5a1ee5abad6252352a39830667d00b4f1659c112f7d9489d11eb27cf42eb0c47e38e287e54829df637241fc5b3893a1c95d858c6a0b5854c3962d1602f98ab1f2e10fffa53ed679116058eedef1c6f3135ddf1126abc2a0a188b5aa334d3c43f352ab40a36e246a227d56fe2eead9817e6333686768d6b1253a3da800b061f75d5960e64c36dd5eaae17bba5d15e1847bdadfcb35b91e88c6cdc09df0a35fa42e59a9de1b49a4bc91cce07c2e2523f685cc6a8217c8a8b229ae5d6ba64e288992f063402135fa17ec6d15a13e33dad687b1851f6b971c89ae7e51aa7270330b9fc182ac3398d2536a91b1729ed55008d835c35e4902530b0418995f7dc574bd54f29cd0997ca82d127ce1d8a196b49f500ec7999dba36501ca924fb27ecfc1daa27695e28f24971cca2d0a9cf015e0112f8d7e8ced8d80edd9ce19ae26e6fe28edaa4f35d58b906db8a14c9573133319aa0db20bd627389e6ce47e402fc6ca7fd4c44e83beac49e1317eeb9632a9ebc7adc3b5117c9d4cd39bd775b39017aa12490d107980f7b9b237a507ce152b9b17f714b37abc340a83f1a12e7bcaa50c60762850351493fd8cd2ced39d0c2d4768bc140ed6babc04bd91362d4ebb73ca964dc0aeae554e4795533836d70c67eb33e485843d2d33c486b70608c46939f141b734986bb786511842cf29fd57339d6c73ff3f22fe7381e9a6a4569296d35328480c77e9baf5753ed0c3a8037ae5e496a062cbb3b448cb3a71c4b88654105e09b7ce7c3d369c4a4070b5444a08bd66ea482a54f5bb9f3829e3b9d895ed7ffc7df8b23a8ae8cb8f65e2d11feb06940c41f305f21903345440d855418bbdc2018e378fb85f6d295c63d8f0ebe5113b16e0d895d7455d074a5bcc584d2d823ef1cf56d5420a931a9384f7bb9c293dca3440eba2d4b12e0643f21409053766c14ac927f70e076723c620887f8f1e983ad6413e683bbaf13e9e15182c710871d16d7d93701e45b9015f2b9301191bfc538ab1ca8346243bc0609b392db941dd2bdcc0c9f2ea47ab021d739e72acda228280afeeb3e7f3fc9f13bef54cae34335275830610e0f3bd493d9eb8ad6738e5d53cb0eff02ef37446171023a77d0de5037f139cd465df1255c7910ccbd89cc40278da2208c436affe3731268b5d6c4d3976630273ed8e83e0d6e144fbe2c6ebee0c80da2e96caaf187bd0ef77c9fb43516a5c6bc10f8ae386057b0ef5e05af606b7017bb0299403d32a27f628a369b4d316b8566e78666af5231489d7f53d426250205cd561309713076d531069c30f3cf321ea3ad7a93dbf73fc94619e784a9adaf5d7da02e42ea0c2330506bfbee562b9ab068cecfa673b20cf9303c3a3b25d991a4149829be205d4fb0309b4a932a665d4bfdafcc71bf473984140fbcf6c7842d4d47d6da77bb6860e14cdee767f2ee3f7d83fe8fb87f92be58cc9eabb627bbb329715e79bb0c207cfd4e5fc22abb06c89709d9f8341bcdc6a49597e8974d036639921129212d7dc7e98148f42d5b643300eba747bbd011779015089b59feba5ea624296eb0205ca7c869b8e79993e16558c521851bf24574c93977a43e127e70abf3774c3d3afc17740c67c346b55106ecff7ee60314d149bdc3b73ac271bbd5fe2ab633305a21e07cd616de2bc3fe048d296604afb2679ea3f72fc6f571c7ee627dd53dbde91ff4b51d5ec5b3b4b2812859039700d8b039b23f1ecd0fafb429241ddd24a01b196ed28e03045e2a32cefef835315b5768accb69f32f27367e75076938c2bcd5fe788a146776290b7426acbe284d4cb42d60f8ea3ec86b15670216013f9da3a260f4311fed15b8ccff84fa3b65aa09c10ee9ad0ed01f8753562360db7c2da44a1581598029b5cb4519100568368be95304a7bf044efb1c4566532e3f5ae701bd0bf0cc6af84bc08156eabfa4336533540a3832aedd3734fd5ef0546bb458c98d7347bf310a56047603b84de241687199a41cd4218624037e32f3277942e9d5e687f3a263aa7c0e59e7ebfd2cf39e714db846302b02759d0c9bfbb7669610f6276f66861086e3fc1c279eaa736673762e40d0d403130e261f24da3c3ae243d4438b2fac3c75ba0a311b39900b9433d3f25c61fc51e1e73a832c389c551b3eb29bde4dddc2063422e6788d18b4e3dc9eb405b7be93fbfc2fc6aac1944cec7b3758e75dc154d62d1e86a0177ae4c0d60155af6a247d5a283b825e9399825523ca6710bf1a48596349fdb0a2111097eddcfb73a995594d108d4f725657dc32ae4741b3f5f48debb6fe0a74e3d71ccf0366a47b64bd5b06be737c34706c0e1dee6163c0f786826107f24bc5f5fa3e53e874974417ed571991a307dc3d4a5f0b6285ef618d9e2d25a38f77a143dedec10eb9e75e2808aaff046ac8b88e10168bb3ceddf580afe912ac197e61e4c0e8eba2034bac28900dc4c4f67a8cc38211cfa3be6235b4dd4bd669b3771611c9bb10f568b58d38f35367382bc6070964464ed49e05e2d93813200dab3897b961f259bae11a2a72350d88fbb5eac4eb0afdf291b5bea8cac51d69bfb0d257c31aa7e3fd53e782999cd021e5dcc2afd435481960f12ab481e83781a8426e515d9bcec3a07b2303dc291d6770a9b862c80b59e354c3db640dbe0ccf661c01761f1480298f6264a2acd0334656cc551c9ae516ba72a5c798bc74aa70cf7b62f12eabc1b827bf704d7e0656a1f86b586f26c1765c08228a189da8070cd4e6bc27d1a570daf4c59a871091ed1841f8f5cadf7329b5c2bbb5d82a8300f6cf85c1a36832438bcf17c906283f7d205799786ec6407531b52f76935b69aa53d93afa22dab5c37a314d528f19e6637fd9d7f66a4d9b1c94e6dbe0a93fac9dcf759203a2043667e4c022564c22f44a98bd1a37245f1ff8035fe25080a092cbe18517dd796f5e717168c0068f8cdde82b8fded5bc940e0cebc830df073ed6028a2c16f7fc4fefd98bed635d8cb0d3da1ebc3b7ea6eda2a70d764c5960d19e2f419a6722458b8cef267208c9832291ba08ef3cc6c31a6bf10b50d849b26401a66054dd7c6c977fb5fcbbc85521cd29dec2bc51da069ab0f0e5728ec03f57b65fc9fbe61bfa7047696428f3a633bde6f5179a2469028fbdd82f223679807bae8da4065c7dd9a1ec422d2c77271a958599bf6a3bba321f765031ed22d8c08cbaa08512936f7e68f4a46da64c639e70a2734bf6d117377d29b1360010aed02d470c16ff41793a391c5c1b5ede3a08b1daaba22a3e4a81b22ab21ba39e27e6ec1c16f6b23b8c2bf5380b9a16ab8e8920ae6780e80fa4910b812e152fdb05bb6cc8a441ef06f4f7765f1ef2447dce17fa823d4aa5e22df160962ebe19e35626c4d403d7c9e4d33808e00c61fe9076cba5ef272af7753c0d40797f80ec20b194583ffb79b9c18499edb25fee6f386ad34f34238c3d278d50a1ef8926edd68cd71a04ab87151aa327926984a160a5829c58752dd073a458e3f5ca2ace280457a3f1bab65b339baa88170fd7678196d92650bef4d4706b7908beb8a6b4d2f41fd39f3006593acd3ce8edd12e77e16d6056c6e36c98e06af2863fef40ac803065014677bf5832a308f8dcee04a5fb9aa7cf620a6f5e0ff51c58bd52d22ec704a6649bc2c16b27ebe1b2c405a681236c945016693c6e802aaa427c6a79b0c98d3ed9e2cb0230cbd2327f46cf0b5f62726a1f91c0487e19d571329292f405de3526fdc49841b2dcb9943227c87aeed0703f792b0f6cc0f201192257f0f36c444f11176e61c0bc32c4feab6bb1fae840e2b03e62306b8b489f7e1897faae182f4e4f99a951ce5fa32523cd307b6b668a4b534dbae42367b293c190da4966fafdba16642a77b6b84795f9e460e4f0acd6e1878a45abc3a597fa5eb4e4181b283fdb594d27f71f59a1ecd800787", 0x1000, 0x8}], 0x402, &(0x7f00000027c0)={[{'{'}, {'#}/'}], [{@euid_lt={'euid<', 0xee01}}, {@appraise_type='appraise_type=imasig'}, {@pcr={'pcr', 0x3d, 0x8}}, {@obj_user={'obj_user', 0x3d, '-'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, '!%-\\'}}, {@hash='hash'}, {@obj_user={'obj_user', 0x3d, '/{!$'}}, {@hash='hash'}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x1000006, 0x4088810, r0, 0x8000000)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x10, r0, 0x8000000)
syz_io_uring_setup(0x2fb8, &(0x7f0000002900)={0x0, 0x70f0, 0x10, 0x0, 0x299, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000002980), &(0x7f00000029c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000028c0)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r1, 0x0, &(0x7f0000002880)='./file1\x00', 0x2, 0x414320, 0x12345}, 0x5)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000000)="f20f01dcb9aa0a00000f32650f7906f2450f1ec0c441f928d1430f01cb45d825c0000000c463d90bc103440f20c03504000000440f22c0f336470f21fb", 0x3d}], 0x1, 0x6, &(0x7f0000000080)=[@cstype3={0x5, 0x5}], 0x1)

05:55:19 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x500000000000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:19 executing program 2:
clock_settime(0x0, &(0x7f0000000100))
r0 = msgget(0x0, 0x200)
msgctl$IPC_RMID(r0, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x2, "c074fc"}, 0xb, 0x0)
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
times(&(0x7f0000000140))
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x20, 0x4, 0x4, {0x2, @raw_data="274783bcb2003bb6816e18b8ab9a371a20a1953e9073a3956b9e591fbd1af672cb93743b8beeed4835a1f9141a810ea96b128ec07f2fb4105c383bc45150f4fb23693aa9a492919436a1f83c9b5c9dfa1a10986f784fe12660c5888cf69a75266a35e574ee305d6503080a681624646904428ef625d99aba360a9a48950b81c41e45b06da57f86e461eb5005c3daa083bdfc3f028b75fbfff7c04dbd1fa38905d6775e629b07f1a33ec4595a5f8f4f5acbbcd84f3c24634d6ffc928ba2230e786f3cb537fb3c0c42"}, 0x7})

05:55:19 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x28980, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00')
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fcdbd7250b003a0006000000080039000100010008003a00060200"/46], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004)
clock_gettime(0xd4e8863c0000000b, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x3, 0x7, 0x1, 0x84000, r3})

05:55:19 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
sync()
ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)=0x2)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00')

[ 2657.256992][T29953] loop1: detected capacity change from 264192 to 0
05:55:19 executing program 3:
clock_gettime(0x4, 0x0)
sync()
syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x32, 0x2)

05:55:19 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x48400, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0x2, 0x4}, 0x6)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r3 = userfaultfd(0x80800)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0xb})
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000008, 0x11, r0, 0x83000000)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100))
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$CAPI_GET_SERIAL(r2, 0xc0044308, &(0x7f0000000000)=0x2)
r4 = syz_open_dev$vim2m(&(0x7f0000000280)='/dev/video#\x00', 0xe3d0, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f00000002c0)={0x1, 0x2, 0x4, 0x10000, 0x7, {0x0, 0x2710}, {0x2, 0xe, 0x80, 0x5, 0x3, 0x4, "a7c59baf"}, 0x96, 0x1, @userptr=0x7, 0x9, 0x0, r2})
r5 = getpgrp(0xffffffffffffffff)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0)
wait4(r5, 0x0, 0x0, 0x0)
rt_sigqueueinfo(r5, 0x1, &(0x7f0000000380)={0x1f, 0x0, 0x5})
socket$nl_generic(0x10, 0x3, 0x10)

05:55:19 executing program 2:
clock_gettime(0xd4e8863c0000000b, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)
getpgrp(0xffffffffffffffff)
r0 = getpgrp(0xffffffffffffffff)
wait4(r0, 0x0, 0x0, 0x0)
move_pages(r0, 0x4, &(0x7f0000000000)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000080)=[0x0], 0x4)
clock_getres(0x5, &(0x7f0000000040))

05:55:19 executing program 4:
r0 = getpgrp(0xffffffffffffffff)
wait4(r0, 0x0, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x80102, 0x0)
sync()
move_pages(r0, 0x61, 0x0, 0x0, 0x0, 0x0)
tgkill(r0, r0, 0x0)

[ 2657.384817][T29953] loop1: detected capacity change from 264192 to 0
05:55:20 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x600000000000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:20 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x8a41, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
clock_gettime(0xd4e8863c0000000b, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00@', @ANYRES16=0x0, @ANYBLOB="20002abd7000fbdbdf250a00000005002a00010000000a000900ffffffffffff0000050037000000000008003a00010000000500330001000000050033000000000005002a00010000000a000900ffffffffffff000008003a00010000000800390009000000"], 0x6c}}, 0x4c004)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000300)='/dev/video#\x00', 0x6, 0x2)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000240))
write$tcp_mem(r2, &(0x7f0000000040)={0x3, 0x20, 0x8, 0x20, 0x9}, 0x48)
r4 = userfaultfd(0x80800)
ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000fec000/0x14000)=nil, 0x14000})
ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x3)

05:55:20 executing program 3:
socket(0x7, 0x3, 0x7)
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x200, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040))

05:55:20 executing program 2:
clock_gettime(0xd4e8863c0000000b, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)
getpgrp(0xffffffffffffffff)
r0 = getpgrp(0xffffffffffffffff)
wait4(r0, 0x0, 0x0, 0x0)
move_pages(r0, 0x4, &(0x7f0000000000)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000080)=[0x0], 0x4)
clock_getres(0x5, &(0x7f0000000040))

05:55:20 executing program 4:
r0 = getpgrp(0xffffffffffffffff)
wait4(r0, 0x0, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x80102, 0x0)
sync()
move_pages(r0, 0x61, 0x0, 0x0, 0x0, 0x0)
tgkill(r0, r0, 0x0)

05:55:20 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x48400, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0x2, 0x4}, 0x6)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r3 = userfaultfd(0x80800)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0xb})
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000008, 0x11, r0, 0x83000000)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100))
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$CAPI_GET_SERIAL(r2, 0xc0044308, &(0x7f0000000000)=0x2)
r4 = syz_open_dev$vim2m(&(0x7f0000000280)='/dev/video#\x00', 0xe3d0, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f00000002c0)={0x1, 0x2, 0x4, 0x10000, 0x7, {0x0, 0x2710}, {0x2, 0xe, 0x80, 0x5, 0x3, 0x4, "a7c59baf"}, 0x96, 0x1, @userptr=0x7, 0x9, 0x0, r2})
r5 = getpgrp(0xffffffffffffffff)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0)
wait4(r5, 0x0, 0x0, 0x0)
rt_sigqueueinfo(r5, 0x1, &(0x7f0000000380)={0x1f, 0x0, 0x5})

05:55:20 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x80, 0x1, 0xff, 0x242, 0x1, 0x400, [], 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x40)
r0 = gettid()
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0xe0002, 0x0)
ioctl$CAPI_GET_FLAGS(r1, 0x80044323, &(0x7f0000000140))
r2 = getpgrp(r0)
move_pages(r2, 0x2, &(0x7f0000000040)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000080)=[0x7f, 0x4, 0x3f], &(0x7f00000000c0)=[0x0], 0x0)
gettid()
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000180)=0x6, 0x8)
move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x6)

[ 2657.717409][T29982] loop1: detected capacity change from 264192 to 0
05:55:20 executing program 0:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/50)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000040)=0xffffffff, 0x4)
timer_create(0x7, &(0x7f00000001c0)={0x0, 0x9, 0x2, @thr={&(0x7f0000000080)="f9f4f923749e88be9dce619d77832c27ebb92a1b584476c7ffef5fa780017fe952d9f4e280ff3f1d28f943fc10c29ce676833d9fe391a61660351bb139632b13494732f360ea43f3a396466df721ae9a9f0aeed27dd3cdd9f29211e2cbaf5fc0a35fcf8e043613a4483bbf0e8baa9cafdba69b76b4d25aa6c16b57321b91ff1341444f536df4168eab1376e9cb76f14bf437efeb01b09c66f4312c0c6c9e186db8b376045c71c0495329795906f6d51a46272f52e7ffe8faf7a879b3033b353170ef6dc6489df322d5b5037b6f1f6a6cafef99e1", &(0x7f0000000180)="7ada7a5e44ccdfbbf7e7c45fa114"}}, &(0x7f0000000200)=<r1=>0x0)
clock_gettime(0x0, &(0x7f0000000240)={<r2=>0x0, <r3=>0x0})
timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x3938700}, {r2, r3+60000000}}, &(0x7f00000002c0))

05:55:20 executing program 2:
clock_gettime(0xd4e8863c0000000b, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)
getpgrp(0xffffffffffffffff)
r0 = getpgrp(0xffffffffffffffff)
wait4(r0, 0x0, 0x0, 0x0)
move_pages(r0, 0x4, &(0x7f0000000000)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000080)=[0x0], 0x4)
clock_getres(0x5, &(0x7f0000000040))

05:55:20 executing program 4:
r0 = getpgrp(0xffffffffffffffff)
wait4(r0, 0x0, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x80102, 0x0)
sync()
move_pages(r0, 0x61, 0x0, 0x0, 0x0, 0x0)
tgkill(r0, r0, 0x0)

[ 2657.826102][T29982] loop1: detected capacity change from 264192 to 0
05:55:20 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x700000000000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:20 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x48400, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0x2, 0x4}, 0x6)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r3 = userfaultfd(0x80800)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0xb})
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000008, 0x11, r0, 0x83000000)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100))
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$CAPI_GET_SERIAL(r2, 0xc0044308, &(0x7f0000000000)=0x2)
r4 = syz_open_dev$vim2m(&(0x7f0000000280)='/dev/video#\x00', 0xe3d0, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f00000002c0)={0x1, 0x2, 0x4, 0x10000, 0x7, {0x0, 0x2710}, {0x2, 0xe, 0x80, 0x5, 0x3, 0x4, "a7c59baf"}, 0x96, 0x1, @userptr=0x7, 0x9, 0x0, r2})
r5 = getpgrp(0xffffffffffffffff)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0)
wait4(r5, 0x0, 0x0, 0x0)

05:55:20 executing program 3:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x48400, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0x2, 0x4}, 0x6)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r3 = userfaultfd(0x80800)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0xb})
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000008, 0x11, r0, 0x83000000)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100))
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$CAPI_GET_SERIAL(r2, 0xc0044308, &(0x7f0000000000)=0x2)
r4 = syz_open_dev$vim2m(&(0x7f0000000280)='/dev/video#\x00', 0xe3d0, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f00000002c0)={0x1, 0x2, 0x4, 0x10000, 0x7, {0x0, 0x2710}, {0x2, 0xe, 0x80, 0x5, 0x3, 0x4, "a7c59baf"}, 0x96, 0x1, @userptr=0x7, 0x9, 0x0, r2})
r5 = getpgrp(0xffffffffffffffff)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0)
wait4(r5, 0x0, 0x0, 0x0)
rt_sigqueueinfo(r5, 0x1, &(0x7f0000000380)={0x1f, 0x0, 0x5})

05:55:20 executing program 2:
clock_gettime(0xd4e8863c0000000b, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)
getpgrp(0xffffffffffffffff)
r0 = getpgrp(0xffffffffffffffff)
wait4(r0, 0x0, 0x0, 0x0)
move_pages(r0, 0x4, &(0x7f0000000000)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000080)=[0x0], 0x4)

05:55:20 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0xfffffffffffffe8a, 0x0, 0x400, 0x70bd29, 0x25dfdc01, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}}, 0x8000050)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1})
clock_gettime(0xd4e8863c12c8ef23, 0x0)

05:55:20 executing program 4:
r0 = getpgrp(0xffffffffffffffff)
wait4(r0, 0x0, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x80102, 0x0)
sync()
move_pages(r0, 0x61, 0x0, 0x0, 0x0, 0x0)

[ 2658.107876][T30009] loop1: detected capacity change from 264192 to 0
05:55:20 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x48400, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0x2, 0x4}, 0x6)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r3 = userfaultfd(0x80800)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0xb})
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000008, 0x11, r0, 0x83000000)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100))
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$CAPI_GET_SERIAL(r2, 0xc0044308, &(0x7f0000000000)=0x2)
r4 = syz_open_dev$vim2m(&(0x7f0000000280)='/dev/video#\x00', 0xe3d0, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f00000002c0)={0x1, 0x2, 0x4, 0x10000, 0x7, {0x0, 0x2710}, {0x2, 0xe, 0x80, 0x5, 0x3, 0x4, "a7c59baf"}, 0x96, 0x1, @userptr=0x7, 0x9, 0x0, r2})
getpgrp(0xffffffffffffffff)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0)

[ 2658.162988][T30009] loop1: detected capacity change from 264192 to 0
05:55:20 executing program 2:
clock_gettime(0xd4e8863c0000000b, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)
getpgrp(0xffffffffffffffff)
r0 = getpgrp(0xffffffffffffffff)
wait4(r0, 0x0, 0x0, 0x0)

05:55:20 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x800000000000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:20 executing program 4:
r0 = getpgrp(0xffffffffffffffff)
wait4(r0, 0x0, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x80102, 0x0)
move_pages(r0, 0x61, 0x0, 0x0, 0x0, 0x0)

05:55:20 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0xfffffffffffffe8a, 0x0, 0x400, 0x70bd29, 0x25dfdc01, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}}, 0x8000050)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1})
clock_gettime(0xd4e8863c12c8ef23, 0x0)

05:55:20 executing program 3:
r0 = getpgrp(0xffffffffffffffff)
wait4(r0, 0x0, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x80102, 0x0)
sync()
move_pages(r0, 0x61, 0x0, 0x0, 0x0, 0x0)

05:55:20 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x48400, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0x2, 0x4}, 0x6)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r3 = userfaultfd(0x80800)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0xb})
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000008, 0x11, r0, 0x83000000)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100))
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$CAPI_GET_SERIAL(r2, 0xc0044308, &(0x7f0000000000)=0x2)
r4 = syz_open_dev$vim2m(&(0x7f0000000280)='/dev/video#\x00', 0xe3d0, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f00000002c0)={0x1, 0x2, 0x4, 0x10000, 0x7, {0x0, 0x2710}, {0x2, 0xe, 0x80, 0x5, 0x3, 0x4, "a7c59baf"}, 0x96, 0x1, @userptr=0x7, 0x9, 0x0, r2})
getpgrp(0xffffffffffffffff)

05:55:21 executing program 2:
clock_gettime(0xd4e8863c0000000b, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)
getpgrp(0xffffffffffffffff)
getpgrp(0xffffffffffffffff)

05:55:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0xfffffffffffffe8a, 0x0, 0x400, 0x70bd29, 0x25dfdc01, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}}, 0x8000050)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1})
clock_gettime(0xd4e8863c12c8ef23, 0x0)

[ 2658.528696][T30034] loop1: detected capacity change from 264192 to 0
05:55:21 executing program 3 (fault-call:0 fault-nth:0):
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:21 executing program 4:
r0 = getpgrp(0xffffffffffffffff)
wait4(r0, 0x0, 0x0, 0x0)
move_pages(r0, 0x61, 0x0, 0x0, 0x0, 0x0)

05:55:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0xfffffffffffffe8a, 0x0, 0x400, 0x70bd29, 0x25dfdc01, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}}, 0x8000050)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1})

[ 2658.611644][T30034] loop1: detected capacity change from 264192 to 0
05:55:21 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x48400, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0x2, 0x4}, 0x6)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r3 = userfaultfd(0x80800)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0xb})
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000008, 0x11, r0, 0x83000000)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100))
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$CAPI_GET_SERIAL(r2, 0xc0044308, &(0x7f0000000000)=0x2)
r4 = syz_open_dev$vim2m(&(0x7f0000000280)='/dev/video#\x00', 0xe3d0, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f00000002c0)={0x1, 0x2, 0x4, 0x10000, 0x7, {0x0, 0x2710}, {0x2, 0xe, 0x80, 0x5, 0x3, 0x4, "a7c59baf"}, 0x96, 0x1, @userptr=0x7, 0x9, 0x0, r2})

05:55:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0xfffffffffffffe8a, 0x0, 0x400, 0x70bd29, 0x25dfdc01, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}}, 0x8000050)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))

05:55:21 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x2000000000000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:21 executing program 2:
clock_gettime(0xd4e8863c0000000b, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)
getpgrp(0xffffffffffffffff)

[ 2658.758852][T30053] FAULT_INJECTION: forcing a failure.
[ 2658.758852][T30053] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2658.800356][T30053] CPU: 1 PID: 30053 Comm: syz-executor.3 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2658.810051][T30053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2658.820132][T30053] Call Trace:
[ 2658.823427][T30053]  dump_stack+0x107/0x163
[ 2658.827777][T30053]  should_fail.cold+0x5/0x1f
[ 2658.832396][T30053]  _copy_from_user+0x2c/0x180
[ 2658.837094][T30053]  io_uring_setup+0xa3/0x39c0
[ 2658.841814][T30053]  ? io_link_timeout_fn+0x480/0x480
05:55:21 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x48400, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0x2, 0x4}, 0x6)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r3 = userfaultfd(0x80800)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0xb})
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000008, 0x11, r0, 0x83000000)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100))
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$CAPI_GET_SERIAL(r2, 0xc0044308, &(0x7f0000000000)=0x2)
syz_open_dev$vim2m(&(0x7f0000000280)='/dev/video#\x00', 0xe3d0, 0x2)

[ 2658.847052][T30053]  ? wait_for_completion_io+0x260/0x260
[ 2658.852614][T30053]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2658.858877][T30053]  ? vfs_write+0x18e/0xa80
[ 2658.863322][T30053]  ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 2658.869595][T30053]  ? fput+0x2a/0x50
[ 2658.873430][T30053]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2658.879354][T30053]  do_syscall_64+0x2d/0x70
[ 2658.883801][T30053]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2658.889716][T30053] RIP: 0033:0x45e149
[ 2658.893619][T30053] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2658.913244][T30053] RSP: 002b:00007f8443111be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 2658.921680][T30053] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045e149
[ 2658.929666][T30053] RDX: 0000000020005000 RSI: 0000000020000080 RDI: 0000000000003fda
[ 2658.937643][T30053] RBP: 00007f8443111ca0 R08: 0000000020000140 R09: 0000000020000140
05:55:21 executing program 4:
r0 = getpgrp(0xffffffffffffffff)
move_pages(r0, 0x61, 0x0, 0x0, 0x0, 0x0)

[ 2658.945628][T30053] R10: 0000000020000100 R11: 0000000000000206 R12: 0000000020005000
[ 2658.953616][T30053] R13: 0000000020002000 R14: 0000000020000140 R15: 0000000020000100
05:55:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0xfffffffffffffe8a, 0x0, 0x400, 0x70bd29, 0x25dfdc01, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}}, 0x8000050)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))

05:55:21 executing program 3 (fault-call:0 fault-nth:1):
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:21 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x48400, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0x2, 0x4}, 0x6)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r3 = userfaultfd(0x80800)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0xb})
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000008, 0x11, r0, 0x83000000)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100))
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$CAPI_GET_SERIAL(r2, 0xc0044308, &(0x7f0000000000)=0x2)

[ 2659.079905][T30063] loop1: detected capacity change from 264192 to 0
05:55:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0xfffffffffffffe8a, 0x0, 0x400, 0x70bd29, 0x25dfdc01, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}}, 0x8000050)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)

[ 2659.156129][T30063] loop1: detected capacity change from 264192 to 0
05:55:21 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x0)

05:55:21 executing program 2:
clock_gettime(0xd4e8863c0000000b, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)

[ 2659.228525][T30077] FAULT_INJECTION: forcing a failure.
[ 2659.228525][T30077] name failslab, interval 1, probability 0, space 0, times 0
[ 2659.284389][T30077] CPU: 0 PID: 30077 Comm: syz-executor.3 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2659.294706][T30077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2659.304782][T30077] Call Trace:
[ 2659.308073][T30077]  dump_stack+0x107/0x163
[ 2659.312427][T30077]  should_fail.cold+0x5/0x1f
[ 2659.317063][T30077]  ? io_uring_setup+0x51a/0x39c0
[ 2659.322021][T30077]  should_failslab+0x5/0x10
[ 2659.326559][T30077]  kmem_cache_alloc_trace+0x55/0x290
[ 2659.331881][T30077]  io_uring_setup+0x51a/0x39c0
[ 2659.337739][T30077]  ? io_link_timeout_fn+0x480/0x480
[ 2659.342982][T30077]  ? wait_for_completion_io+0x260/0x260
[ 2659.348582][T30077]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2659.354546][T30077]  do_syscall_64+0x2d/0x70
[ 2659.358988][T30077]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2659.364926][T30077] RIP: 0033:0x45e149
[ 2659.368838][T30077] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2659.388466][T30077] RSP: 002b:00007f8443111be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 2659.396901][T30077] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045e149
[ 2659.404904][T30077] RDX: 0000000020005000 RSI: 0000000020000080 RDI: 0000000000003fda
[ 2659.412911][T30077] RBP: 00007f8443111ca0 R08: 0000000020000140 R09: 0000000020000140
[ 2659.420919][T30077] R10: 0000000020000100 R11: 0000000000000206 R12: 0000000020005000
05:55:21 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x48400, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0x2, 0x4}, 0x6)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r3 = userfaultfd(0x80800)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0xb})
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000008, 0x11, r0, 0x83000000)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100))
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))

[ 2659.428905][T30077] R13: 0000000020002000 R14: 0000000020000140 R15: 0000000020000100
05:55:22 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x2010000000000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0xfffffffffffffe8a, 0x0, 0x400, 0x70bd29, 0x25dfdc01, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}}, 0x8000050)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)

05:55:22 executing program 4:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x800000000000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:22 executing program 2:
clock_gettime(0xd4e8863c0000000b, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)

05:55:22 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x48400, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0x2, 0x4}, 0x6)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r2 = userfaultfd(0x80800)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0xb})
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000008, 0x11, r0, 0x83000000)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100))

[ 2659.663192][T30092] loop1: detected capacity change from 264192 to 0
05:55:22 executing program 3 (fault-call:0 fault-nth:2):
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

[ 2659.751873][T30096] loop4: detected capacity change from 264192 to 0
05:55:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0xfffffffffffffe8a, 0x0, 0x400, 0x70bd29, 0x25dfdc01, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}}, 0x8000050)

[ 2659.844364][T30092] loop1: detected capacity change from 264192 to 0
05:55:22 executing program 0:
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0xfffffffffffffe8a, 0x0, 0x400, 0x70bd29, 0x25dfdc01, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}}, 0x8000050)

[ 2659.918639][T30111] FAULT_INJECTION: forcing a failure.
[ 2659.918639][T30111] name failslab, interval 1, probability 0, space 0, times 0
[ 2659.932694][T30111] CPU: 1 PID: 30111 Comm: syz-executor.3 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2659.942348][T30111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2659.952401][T30111] Call Trace:
[ 2659.955689][T30111]  dump_stack+0x107/0x163
[ 2659.960026][T30111]  should_fail.cold+0x5/0x1f
[ 2659.964613][T30111]  ? io_uring_setup+0x53c/0x39c0
[ 2659.969547][T30111]  ? io_uring_setup+0x53c/0x39c0
[ 2659.974479][T30111]  should_failslab+0x5/0x10
[ 2659.978975][T30111]  kmem_cache_alloc+0x5e/0x380
[ 2659.983753][T30111]  io_uring_setup+0x53c/0x39c0
[ 2659.988538][T30111]  ? io_link_timeout_fn+0x480/0x480
[ 2659.993740][T30111]  ? wait_for_completion_io+0x260/0x260
[ 2659.999318][T30111]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2660.005215][T30111]  do_syscall_64+0x2d/0x70
[ 2660.009638][T30111]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2660.015534][T30111] RIP: 0033:0x45e149
[ 2660.019433][T30111] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2660.039057][T30111] RSP: 002b:00007f8443111be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 2660.047483][T30111] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045e149
[ 2660.055447][T30111] RDX: 0000000020005000 RSI: 0000000020000080 RDI: 0000000000003fda
05:55:22 executing program 2:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)

05:55:22 executing program 4:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x48400, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0x2, 0x4}, 0x6)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r3 = userfaultfd(0x80800)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0xb})
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000008, 0x11, r0, 0x83000000)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100))
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))

[ 2660.063432][T30111] RBP: 00007f8443111ca0 R08: 0000000020000140 R09: 0000000020000140
[ 2660.071397][T30111] R10: 0000000020000100 R11: 0000000000000206 R12: 0000000020005000
[ 2660.079359][T30111] R13: 0000000020002000 R14: 0000000020000140 R15: 0000000020000100
05:55:22 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x3f00000000000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:22 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x48400, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0x2, 0x4}, 0x6)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r2 = userfaultfd(0x80800)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0xb})
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000008, 0x11, r0, 0x83000000)

05:55:22 executing program 2:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)

05:55:22 executing program 4 (fault-call:0 fault-nth:0):
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x0)

05:55:22 executing program 0:
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0xfffffffffffffe8a, 0x0, 0x400, 0x70bd29, 0x25dfdc01, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}}, 0x8000050)

[ 2660.461110][T30129] FAULT_INJECTION: forcing a failure.
[ 2660.461110][T30129] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2660.479423][T30130] loop1: detected capacity change from 264192 to 0
05:55:23 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x48400, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0x2, 0x4}, 0x6)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
userfaultfd(0x80800)
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000008, 0x11, r0, 0x83000000)

[ 2660.548781][T30129] CPU: 1 PID: 30129 Comm: syz-executor.4 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2660.558463][T30129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2660.568536][T30129] Call Trace:
[ 2660.571829][T30129]  dump_stack+0x107/0x163
[ 2660.576188][T30129]  should_fail.cold+0x5/0x1f
[ 2660.580821][T30129]  _copy_from_user+0x2c/0x180
[ 2660.585529][T30129]  do_pages_stat+0xec/0x450
[ 2660.590163][T30129]  ? migrate_vma_check_page+0x380/0x380
[ 2660.595852][T30129]  ? find_held_lock+0x2d/0x110
[ 2660.600645][T30129]  ? cpuset_mems_allowed+0x248/0x410
[ 2660.605959][T30129]  ? lock_downgrade+0x6d0/0x6d0
[ 2660.610832][T30129]  ? lock_downgrade+0x6d0/0x6d0
[ 2660.615714][T30129]  ? _raw_spin_unlock_irqrestore+0x42/0x50
[ 2660.621558][T30129]  ? lockdep_hardirqs_on+0x79/0x100
[ 2660.626795][T30129]  ? _raw_spin_unlock_irqrestore+0x2f/0x50
[ 2660.632624][T30129]  kernel_move_pages+0xc76/0x15d0
[ 2660.637672][T30129]  ? wait_for_completion_io+0x260/0x260
[ 2660.643256][T30129]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2660.649561][T30129]  ? move_pages_and_store_status.isra.0+0x220/0x220
[ 2660.656175][T30129]  ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 2660.662442][T30129]  ? fput+0x2a/0x50
[ 2660.666285][T30129]  __x64_sys_move_pages+0xdd/0x1b0
[ 2660.671419][T30129]  ? lockdep_hardirqs_on+0x79/0x100
[ 2660.676638][T30129]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2660.682546][T30129]  do_syscall_64+0x2d/0x70
[ 2660.686979][T30129]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2660.692887][T30129] RIP: 0033:0x45e149
[ 2660.696789][T30129] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2660.716528][T30129] RSP: 002b:00007f7d50bf4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 2660.724973][T30129] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e149
[ 2660.732962][T30129] RDX: 0000000000000000 RSI: 0000000000000061 RDI: 0000000000000000
[ 2660.740946][T30129] RBP: 00007f7d50bf4ca0 R08: 0000000000000000 R09: 0000000000000000
05:55:23 executing program 2:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)

[ 2660.748933][T30129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2660.756918][T30129] R13: 00007ffe3626becf R14: 00007f7d50bf59c0 R15: 000000000119bf8c
05:55:23 executing program 3 (fault-call:0 fault-nth:3):
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:23 executing program 0:
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0xfffffffffffffe8a, 0x0, 0x400, 0x70bd29, 0x25dfdc01, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}}, 0x8000050)

[ 2660.811870][T30130] loop1: detected capacity change from 264192 to 0
05:55:23 executing program 4 (fault-call:0 fault-nth:1):
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x0)

05:55:23 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x4000000000000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:23 executing program 2:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)

05:55:23 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x48400, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0x2, 0x4}, 0x6)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000008, 0x11, r0, 0x83000000)

05:55:23 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0xfffffffffffffe8a, 0x0, 0x400, 0x70bd29, 0x25dfdc01, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}}, 0x8000050)

[ 2661.002255][T30150] FAULT_INJECTION: forcing a failure.
[ 2661.002255][T30150] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[ 2661.036617][T30151] FAULT_INJECTION: forcing a failure.
[ 2661.036617][T30151] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2661.064018][T30150] CPU: 1 PID: 30150 Comm: syz-executor.3 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2661.073698][T30150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2661.083761][T30150] Call Trace:
[ 2661.087046][T30150]  dump_stack+0x107/0x163
[ 2661.091398][T30150]  should_fail.cold+0x5/0x1f
[ 2661.096027][T30150]  __alloc_pages_nodemask+0x189/0x740
[ 2661.101501][T30150]  ? __alloc_pages_slowpath.constprop.0+0x2260/0x2260
[ 2661.103568][T30157] loop1: detected capacity change from 264192 to 0
[ 2661.108296][T30150]  ? find_held_lock+0x2d/0x110
[ 2661.108335][T30150]  ? fs_reclaim_release+0x9c/0xe0
[ 2661.108378][T30150]  alloc_pages_current+0x18c/0x2a0
[ 2661.108409][T30150]  kmalloc_order+0x32/0xd0
[ 2661.135568][T30150]  kmalloc_order_trace+0x14/0x130
[ 2661.140812][T30150]  io_uring_setup+0x602/0x39c0
[ 2661.146061][T30150]  ? io_link_timeout_fn+0x480/0x480
[ 2661.152279][T30150]  ? wait_for_completion_io+0x260/0x260
[ 2661.158518][T30150]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2661.165220][T30150]  do_syscall_64+0x2d/0x70
[ 2661.169766][T30150]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2661.176213][T30150] RIP: 0033:0x45e149
[ 2661.180736][T30150] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2661.201250][T30150] RSP: 002b:00007f8443111be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 2661.210091][T30150] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045e149
[ 2661.218524][T30150] RDX: 0000000020005000 RSI: 0000000020000080 RDI: 0000000000003fda
[ 2661.227323][T30150] RBP: 00007f8443111ca0 R08: 0000000020000140 R09: 0000000020000140
[ 2661.236055][T30150] R10: 0000000020000100 R11: 0000000000000206 R12: 0000000020005000
[ 2661.244808][T30150] R13: 0000000020002000 R14: 0000000020000140 R15: 0000000020000100
[ 2661.285419][T30151] CPU: 1 PID: 30151 Comm: syz-executor.4 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2661.296463][T30151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2661.306533][T30151] Call Trace:
[ 2661.309831][T30151]  dump_stack+0x107/0x163
[ 2661.311787][T30157] loop1: detected capacity change from 264192 to 0
[ 2661.314179][T30151]  should_fail.cold+0x5/0x1f
[ 2661.314225][T30151]  _copy_to_user+0x2c/0x150
[ 2661.314260][T30151]  simple_read_from_buffer+0xcc/0x160
[ 2661.335878][T30151]  proc_fail_nth_read+0x187/0x220
[ 2661.340934][T30151]  ? proc_fault_inject_read+0x220/0x220
[ 2661.346522][T30151]  ? security_file_permission+0x248/0x560
[ 2661.353450][T30151]  ? proc_fault_inject_read+0x220/0x220
[ 2661.359016][T30151]  vfs_read+0x1b5/0x570
[ 2661.363198][T30151]  ksys_read+0x12d/0x250
[ 2661.367467][T30151]  ? vfs_write+0xa80/0xa80
[ 2661.371901][T30151]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2661.377817][T30151]  do_syscall_64+0x2d/0x70
[ 2661.382260][T30151]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2661.388491][T30151] RIP: 0033:0x417a41
[ 2661.392651][T30151] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[ 2661.412395][T30151] RSP: 002b:00007f7d50bf4c70 EFLAGS: 00000293 ORIG_RAX: 0000000000000000
[ 2661.420817][T30151] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 0000000000417a41
05:55:24 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0xfffffffffffffe8a, 0x0, 0x400, 0x70bd29, 0x25dfdc01, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}}, 0x8000050)

[ 2661.428800][T30151] RDX: 000000000000000f RSI: 00007f7d50bf4cb0 RDI: 0000000000000003
[ 2661.438649][T30151] RBP: 00007f7d50bf4ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2661.447386][T30151] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[ 2661.455788][T30151] R13: 00007ffe3626becf R14: 00007f7d50bf59c0 R15: 000000000119bf8c
05:55:24 executing program 2 (fault-call:0 fault-nth:0):
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)

05:55:24 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x4800000000000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:24 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x48400, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0x2, 0x4}, 0x6)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200))
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000008, 0x11, r0, 0x83000000)

05:55:24 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0xfffffffffffffe8a, 0x0, 0x400, 0x70bd29, 0x25dfdc01, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}}, 0x8000050)

[ 2661.612303][T30172] FAULT_INJECTION: forcing a failure.
[ 2661.612303][T30172] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2661.681808][T30172] CPU: 0 PID: 30172 Comm: syz-executor.2 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2661.681981][T30175] loop1: detected capacity change from 264192 to 0
[ 2661.691468][T30172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2661.691487][T30172] Call Trace:
[ 2661.691497][T30172]  dump_stack+0x107/0x163
[ 2661.691529][T30172]  should_fail.cold+0x5/0x1f
[ 2661.691563][T30172]  _copy_to_user+0x2c/0x150
[ 2661.691594][T30172]  simple_read_from_buffer+0xcc/0x160
[ 2661.691626][T30172]  proc_fail_nth_read+0x187/0x220
[ 2661.691654][T30172]  ? proc_fault_inject_read+0x220/0x220
[ 2661.691680][T30172]  ? security_file_permission+0x248/0x560
[ 2661.691712][T30172]  ? proc_fault_inject_read+0x220/0x220
[ 2661.751966][T30172]  vfs_read+0x1b5/0x570
[ 2661.756153][T30172]  ksys_read+0x12d/0x250
[ 2661.760415][T30172]  ? vfs_write+0xa80/0xa80
[ 2661.764851][T30172]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2661.770785][T30172]  do_syscall_64+0x2d/0x70
[ 2661.775215][T30172]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2661.781127][T30172] RIP: 0033:0x417a41
[ 2661.785033][T30172] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[ 2661.804668][T30172] RSP: 002b:00007fac68264c70 EFLAGS: 00000293 ORIG_RAX: 0000000000000000
[ 2661.813177][T30172] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000417a41
[ 2661.821238][T30172] RDX: 000000000000000f RSI: 00007fac68264cb0 RDI: 0000000000000003
[ 2661.829218][T30172] RBP: 00007fac68264ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2661.838487][T30172] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[ 2661.846464][T30172] R13: 00007ffd36414f2f R14: 00007fac682659c0 R15: 000000000119bf8c
05:55:24 executing program 3 (fault-call:0 fault-nth:4):
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:24 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x0)

05:55:24 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x48400, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0x2, 0x4}, 0x6)
openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vim2m\x00', 0x2, 0x0)
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000008, 0x11, r0, 0x83000000)

05:55:24 executing program 2:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)

[ 2661.911424][T30175] loop1: detected capacity change from 264192 to 0
05:55:24 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, 0x0, 0x8000050)

05:55:24 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, 0x0, 0x8000050)

05:55:24 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x7)

05:55:24 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, 0x0, 0x8000050)

05:55:24 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x21)

05:55:24 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x4c00000000000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

[ 2662.143719][T30196] FAULT_INJECTION: forcing a failure.
[ 2662.143719][T30196] name failslab, interval 1, probability 0, space 0, times 0
05:55:24 executing program 2:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)

05:55:24 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x48400, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0x2, 0x4}, 0x6)
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000008, 0x11, r0, 0x83000000)

[ 2662.262643][T30196] CPU: 0 PID: 30196 Comm: syz-executor.3 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2662.272332][T30196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2662.282398][T30196] Call Trace:
[ 2662.285683][T30196]  dump_stack+0x107/0x163
[ 2662.290037][T30196]  should_fail.cold+0x5/0x1f
[ 2662.294651][T30196]  ? percpu_ref_init+0xcc/0x3a0
[ 2662.299519][T30196]  should_failslab+0x5/0x10
[ 2662.304047][T30196]  kmem_cache_alloc_trace+0x55/0x290
[ 2662.309345][T30196]  ? __io_openat_prep+0x390/0x390
[ 2662.314378][T30196]  percpu_ref_init+0xcc/0x3a0
[ 2662.319077][T30196]  ? rcu_read_lock_sched_held+0x3a/0x70
[ 2662.324649][T30196]  io_uring_setup+0x6ac/0x39c0
[ 2662.330448][T30196]  ? io_link_timeout_fn+0x480/0x480
[ 2662.335794][T30196]  ? wait_for_completion_io+0x260/0x260
[ 2662.342577][T30196]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2662.349657][T30196]  do_syscall_64+0x2d/0x70
[ 2662.354093][T30196]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2662.360900][T30196] RIP: 0033:0x45e149
[ 2662.365442][T30196] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2662.385934][T30196] RSP: 002b:00007f8443111be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 2662.395293][T30196] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045e149
[ 2662.403854][T30196] RDX: 0000000020005000 RSI: 0000000020000080 RDI: 0000000000003fda
[ 2662.411838][T30196] RBP: 00007f8443111ca0 R08: 0000000020000140 R09: 0000000020000140
[ 2662.420779][T30196] R10: 0000000020000100 R11: 0000000000000206 R12: 0000000020005000
[ 2662.428957][T30196] R13: 0000000020002000 R14: 0000000020000140 R15: 0000000020000100
05:55:25 executing program 3 (fault-call:0 fault-nth:5):
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:25 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdc01, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}}, 0x8000050)

05:55:25 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x700)

[ 2662.493131][T30203] loop1: detected capacity change from 264192 to 0
05:55:25 executing program 2:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4)

[ 2662.603902][T30203] loop1: detected capacity change from 264192 to 0
[ 2662.609560][T30218] FAULT_INJECTION: forcing a failure.
[ 2662.609560][T30218] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2662.623895][T30218] CPU: 0 PID: 30218 Comm: syz-executor.3 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2662.633531][T30218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2662.644430][T30218] Call Trace:
[ 2662.649091][T30218]  dump_stack+0x107/0x163
[ 2662.653437][T30218]  should_fail.cold+0x5/0x1f
[ 2662.658050][T30218]  __alloc_pages_nodemask+0x189/0x740
[ 2662.663440][T30218]  ? __alloc_pages_slowpath.constprop.0+0x2260/0x2260
[ 2662.670227][T30218]  ? up_write+0x1a0/0x580
[ 2662.674568][T30218]  ? downgrade_write+0x3a0/0x3a0
[ 2662.679523][T30218]  alloc_pages_current+0x18c/0x2a0
[ 2662.684658][T30218]  __get_free_pages+0x8/0x40
[ 2662.689884][T30218]  io_uring_setup+0x15aa/0x39c0
[ 2662.694858][T30218]  ? io_link_timeout_fn+0x480/0x480
05:55:25 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdc01, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}}, 0x8000050)

[ 2662.700168][T30218]  ? wait_for_completion_io+0x260/0x260
[ 2662.706491][T30218]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2662.712403][T30218]  do_syscall_64+0x2d/0x70
[ 2662.716832][T30218]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2662.722735][T30218] RIP: 0033:0x45e149
[ 2662.726623][T30218] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2662.746238][T30218] RSP: 002b:00007f8443111be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
05:55:25 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x1a01)

05:55:25 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x48400, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000008, 0x11, r0, 0x83000000)

[ 2662.754663][T30218] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045e149
[ 2662.762641][T30218] RDX: 0000000020005000 RSI: 0000000020000080 RDI: 0000000000003fda
[ 2662.770622][T30218] RBP: 00007f8443111ca0 R08: 0000000020000140 R09: 0000000020000140
[ 2662.778613][T30218] R10: 0000000020000100 R11: 0000000000000206 R12: 0000000020005000
[ 2662.786591][T30218] R13: 0000000020002000 R14: 0000000020000140 R15: 0000000020000100
05:55:25 executing program 2:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8)

05:55:25 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x6800000000000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:25 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdc01, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}}, 0x8000050)

05:55:25 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x48400, 0x0)
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000008, 0x11, r0, 0x83000000)

05:55:25 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x4000)

05:55:25 executing program 3 (fault-call:0 fault-nth:6):
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:25 executing program 2:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

[ 2663.036480][T30235] loop1: detected capacity change from 264192 to 0
05:55:25 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000008, 0x11, 0xffffffffffffffff, 0x83000000)

[ 2663.107750][T30235] loop1: detected capacity change from 264192 to 0
05:55:25 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0xfffffffffffffe8a, 0x0, 0x400, 0x70bd29, 0x25dfdc01, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}}, 0x8000050)

05:55:25 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x6c00000000000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:25 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000008, 0x11, 0xffffffffffffffff, 0x83000000)

[ 2663.213031][T30253] FAULT_INJECTION: forcing a failure.
[ 2663.213031][T30253] name fail_page_alloc, interval 1, probability 0, space 0, times 0
05:55:25 executing program 2:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15)

05:55:25 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x5a01)

[ 2663.288121][T30253] CPU: 0 PID: 30253 Comm: syz-executor.3 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2663.297797][T30253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2663.307865][T30253] Call Trace:
[ 2663.311150][T30253]  dump_stack+0x107/0x163
[ 2663.315497][T30253]  should_fail.cold+0x5/0x1f
[ 2663.320120][T30253]  __alloc_pages_nodemask+0x189/0x740
[ 2663.325557][T30253]  ? __alloc_pages_slowpath.constprop.0+0x2260/0x2260
[ 2663.332352][T30253]  ? up_write+0x1a0/0x580
[ 2663.336694][T30253]  ? downgrade_write+0x3a0/0x3a0
[ 2663.341647][T30253]  alloc_pages_current+0x18c/0x2a0
[ 2663.346774][T30253]  __get_free_pages+0x8/0x40
[ 2663.351377][T30253]  io_uring_setup+0x1760/0x39c0
[ 2663.356259][T30253]  ? io_link_timeout_fn+0x480/0x480
[ 2663.361487][T30253]  ? wait_for_completion_io+0x260/0x260
[ 2663.367063][T30253]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2663.372974][T30253]  do_syscall_64+0x2d/0x70
[ 2663.377400][T30253]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2663.383317][T30253] RIP: 0033:0x45e149
[ 2663.387226][T30253] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2663.406847][T30253] RSP: 002b:00007f8443111be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 2663.415273][T30253] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045e149
[ 2663.423255][T30253] RDX: 0000000020005000 RSI: 0000000020000080 RDI: 0000000000003fda
05:55:26 executing program 5:
clock_gettime(0xd4e8863c0000000b, 0x0)
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000008, 0x11, 0xffffffffffffffff, 0x83000000)

[ 2663.431232][T30253] RBP: 00007f8443111ca0 R08: 0000000020000140 R09: 0000000020000140
[ 2663.439209][T30253] R10: 0000000020000100 R11: 0000000000000206 R12: 0000000020005000
[ 2663.447194][T30253] R13: 0000000020002000 R14: 0000000020000140 R15: 0000000020000100
05:55:26 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, 0x0}, 0x8000050)

05:55:26 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x60ff)

05:55:26 executing program 2:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})

[ 2663.554841][T30264] loop1: detected capacity change from 264192 to 0
05:55:26 executing program 3 (fault-call:0 fault-nth:7):
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:26 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x48400, 0x0)
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000008, 0x11, r0, 0x83000000)

05:55:26 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x107500)

[ 2663.674235][T30264] loop1: detected capacity change from 264192 to 0
05:55:26 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, 0x0}, 0x8000050)

05:55:26 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x7400000000000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

[ 2663.783056][T30284] FAULT_INJECTION: forcing a failure.
[ 2663.783056][T30284] name failslab, interval 1, probability 0, space 0, times 0
05:55:26 executing program 2:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getitimer(0x2, &(0x7f0000000000))
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4)
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil})

[ 2663.858565][T30284] CPU: 0 PID: 30284 Comm: syz-executor.3 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2663.868243][T30284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2663.878302][T30284] Call Trace:
[ 2663.881588][T30284]  dump_stack+0x107/0x163
[ 2663.885940][T30284]  should_fail.cold+0x5/0x1f
[ 2663.890559][T30284]  ? io_wq_create+0xb4/0xa60
[ 2663.895169][T30284]  should_failslab+0x5/0x10
[ 2663.899701][T30284]  kmem_cache_alloc_trace+0x55/0x290
[ 2663.905031][T30284]  io_wq_create+0xb4/0xa60
[ 2663.909474][T30284]  ? alloc_pages_current+0x194/0x2a0
[ 2663.914773][T30284]  io_uring_setup+0x2c68/0x39c0
[ 2663.919651][T30284]  ? io_link_timeout_fn+0x480/0x480
[ 2663.924877][T30284]  ? __do_sys_io_uring_enter+0x1c00/0x1c00
[ 2663.930720][T30284]  ? io_queue_linked_timeout+0x1f0/0x1f0
[ 2663.936390][T30284]  ? wait_for_completion_io+0x260/0x260
[ 2663.941966][T30284]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2663.947886][T30284]  do_syscall_64+0x2d/0x70
[ 2663.952331][T30284]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
05:55:26 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x400000)

05:55:26 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, 0x0}, 0x8000050)

[ 2663.958237][T30284] RIP: 0033:0x45e149
[ 2663.962154][T30284] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2663.981788][T30284] RSP: 002b:00007f8443111be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 2663.990223][T30284] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045e149
[ 2663.998195][T30284] RDX: 0000000020005000 RSI: 0000000020000080 RDI: 0000000000003fda
05:55:26 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x48400, 0x0)
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000008, 0x11, r0, 0x83000000)

[ 2664.006181][T30284] RBP: 00007f8443111ca0 R08: 0000000020000140 R09: 0000000020000140
[ 2664.014274][T30284] R10: 0000000020000100 R11: 0000000000000206 R12: 0000000020005000
[ 2664.022250][T30284] R13: 0000000020002000 R14: 0000000020000140 R15: 0000000020000100
05:55:26 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x549000)

[ 2664.098270][T30295] loop1: detected capacity change from 264192 to 0
05:55:26 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={0x0}}, 0x8000050)

05:55:26 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x48400, 0x0)
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000008, 0x11, r0, 0x83000000)

[ 2664.197166][T30295] loop1: detected capacity change from 264192 to 0
05:55:26 executing program 3 (fault-call:0 fault-nth:8):
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:26 executing program 2:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)
shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil)

05:55:26 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x7a00000000000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:26 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x48400, 0x0)
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000008, 0x11, r0, 0x83000000)

05:55:26 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={0x0}}, 0x8000050)

05:55:26 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x748000)

[ 2664.377972][T30316] FAULT_INJECTION: forcing a failure.
[ 2664.377972][T30316] name failslab, interval 1, probability 0, space 0, times 0
[ 2664.435841][T30316] CPU: 0 PID: 30316 Comm: syz-executor.3 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2664.445515][T30316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2664.455584][T30316] Call Trace:
[ 2664.458875][T30316]  dump_stack+0x107/0x163
[ 2664.463231][T30316]  should_fail.cold+0x5/0x1f
[ 2664.467847][T30316]  ? io_wq_create+0x107/0xa60
[ 2664.472546][T30316]  should_failslab+0x5/0x10
[ 2664.477064][T30316]  __kmalloc+0x72/0x310
[ 2664.481248][T30316]  io_wq_create+0x107/0xa60
05:55:27 executing program 2:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000140))
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x8, 0x3, 0x2, "7a8f000d56043207006fe5e7808712c3debde1cf2a6185a109f1668bcdf75fc5", 0x31364d4e})
shmget(0x1, 0x3000, 0x80, &(0x7f0000ffb000/0x3000)=nil)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0)
clock_gettime(0x0, &(0x7f00000000c0)={<r2=>0x0, <r3=>0x0})
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000080))
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r5, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x4000, 0x3ff, {r2, r3/1000+10000}, {0x5, 0x8, 0x3, 0x87, 0xff, 0x2, "b6aa559f"}, 0x7, 0x2, @fd=r4, 0x4, 0x0, r5})

[ 2664.485794][T30316]  ? alloc_pages_current+0x194/0x2a0
[ 2664.491113][T30316]  io_uring_setup+0x2c68/0x39c0
[ 2664.495994][T30316]  ? io_link_timeout_fn+0x480/0x480
[ 2664.501213][T30316]  ? __do_sys_io_uring_enter+0x1c00/0x1c00
[ 2664.507050][T30316]  ? io_queue_linked_timeout+0x1f0/0x1f0
[ 2664.512706][T30316]  ? wait_for_completion_io+0x260/0x260
[ 2664.518279][T30316]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2664.524192][T30316]  do_syscall_64+0x2d/0x70
[ 2664.528630][T30316]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
05:55:27 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={0x0}}, 0x8000050)

[ 2664.534555][T30316] RIP: 0033:0x45e149
[ 2664.538452][T30316] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2664.558071][T30316] RSP: 002b:00007f8443111be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 2664.566498][T30316] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045e149
[ 2664.574476][T30316] RDX: 0000000020005000 RSI: 0000000020000080 RDI: 0000000000003fda
05:55:27 executing program 2:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x11ffffffffffffff)

[ 2664.582449][T30316] RBP: 00007f8443111ca0 R08: 0000000020000140 R09: 0000000020000140
[ 2664.590435][T30316] R10: 0000000020000100 R11: 0000000000000206 R12: 0000000020005000
[ 2664.598415][T30316] R13: 0000000020002000 R14: 0000000020000140 R15: 0000000020000100
[ 2664.625809][T30320] loop1: detected capacity change from 264192 to 0
05:55:27 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0xfffffffffffffe8a, 0x0, 0x0, 0x70bd29, 0x25dfdc01, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}}, 0x8000050)

05:55:27 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x751000)

05:55:27 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x48400, 0x0)
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000008, 0x11, r0, 0x83000000)

[ 2664.776095][T30320] loop1: detected capacity change from 264192 to 0
05:55:27 executing program 3 (fault-call:0 fault-nth:9):
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:27 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x807400)

05:55:27 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x8cffffff00000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:27 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0xfffffffffffffe8a, 0x0, 0x0, 0x0, 0x25dfdc01, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}}, 0x8000050)

05:55:27 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000008, 0x11, r0, 0x83000000)

05:55:27 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0c7004d2016193a7f8b6ad8363e093e1c000000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fbdbdf250a00000005002e0000000000"], 0x1c}}, 0x2934141369757497)
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x19)

05:55:27 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x905400)

05:55:27 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0xfffffffffffffe8a, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}}, 0x8000050)

[ 2665.113632][T30356] FAULT_INJECTION: forcing a failure.
[ 2665.113632][T30356] name failslab, interval 1, probability 0, space 0, times 0
[ 2665.182223][T30361] loop1: detected capacity change from 264192 to 0
[ 2665.191656][T30356] CPU: 0 PID: 30356 Comm: syz-executor.3 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2665.202436][T30356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2665.212584][T30356] Call Trace:
[ 2665.215869][T30356]  dump_stack+0x107/0x163
[ 2665.220227][T30356]  should_fail.cold+0x5/0x1f
[ 2665.224861][T30356]  should_failslab+0x5/0x10
05:55:27 executing program 2:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)
personality(0x400000a)

05:55:27 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x11, r0, 0x83000000)

[ 2665.229400][T30356]  kmem_cache_alloc_node_trace+0x5a/0x2d0
[ 2665.235139][T30356]  ? io_wq_create+0x5b3/0xa60
[ 2665.239844][T30356]  io_wq_create+0x5b3/0xa60
[ 2665.244371][T30356]  io_uring_setup+0x2c68/0x39c0
[ 2665.249249][T30356]  ? io_link_timeout_fn+0x480/0x480
[ 2665.254462][T30356]  ? __do_sys_io_uring_enter+0x1c00/0x1c00
[ 2665.260300][T30356]  ? io_queue_linked_timeout+0x1f0/0x1f0
[ 2665.266390][T30356]  ? wait_for_completion_io+0x260/0x260
[ 2665.271965][T30356]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2665.277881][T30356]  do_syscall_64+0x2d/0x70
[ 2665.282332][T30356]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2665.288236][T30356] RIP: 0033:0x45e149
[ 2665.292133][T30356] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2665.311926][T30356] RSP: 002b:00007f8443111be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 2665.320353][T30356] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045e149
05:55:27 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x1000000)

[ 2665.328351][T30356] RDX: 0000000020005000 RSI: 0000000020000080 RDI: 0000000000003fda
[ 2665.336342][T30356] RBP: 00007f8443111ca0 R08: 0000000020000140 R09: 0000000020000140
[ 2665.344314][T30356] R10: 0000000020000100 R11: 0000000000000206 R12: 0000000020005000
[ 2665.352288][T30356] R13: 0000000020002000 R14: 0000000020000140 R15: 0000000020000100
05:55:27 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x8000050)

05:55:27 executing program 3 (fault-call:0 fault-nth:10):
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

[ 2665.400110][T30361] loop1: detected capacity change from 264192 to 0
05:55:28 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x10, r0, 0x83000000)

05:55:28 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x97ffffff00000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:28 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3a9}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000004)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @vsock={0x28, 0x0, 0x2711, @my=0x0}, @isdn={0x22, 0x8, 0x80, 0x3f, 0xfe}, @llc={0x1a, 0x312, 0x49, 0x0, 0xaf, 0x1, @local}, 0x8, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)='veth1_macvtap\x00', 0x2, 0x200, 0x8})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
socket$inet6_tcp(0xa, 0x1, 0x0)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x357aefc1c7fb5ee, &(0x7f0000000000)=0x6, 0x3ff, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000300)=0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00')
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)={0x20, 0x2, 0x4, 0x100, 0x1, {0x77359400}, {0x3, 0x0, 0x20, 0x20, 0x15, 0x41, "fa8bd8e6"}, 0xe0, 0x4, @offset=0xffffffff, 0xfffffff9})

[ 2665.560115][T30381] FAULT_INJECTION: forcing a failure.
[ 2665.560115][T30381] name failslab, interval 1, probability 0, space 0, times 0
05:55:28 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x11a0000)

[ 2665.613077][T30381] CPU: 0 PID: 30381 Comm: syz-executor.3 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2665.622732][T30381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2665.632803][T30381] Call Trace:
[ 2665.636094][T30381]  dump_stack+0x107/0x163
[ 2665.640459][T30381]  should_fail.cold+0x5/0x1f
[ 2665.645084][T30381]  should_failslab+0x5/0x10
[ 2665.649610][T30381]  kmem_cache_alloc_node_trace+0x5a/0x2d0
[ 2665.655346][T30381]  ? io_wq_create+0x5b3/0xa60
[ 2665.660053][T30381]  io_wq_create+0x5b3/0xa60
[ 2665.664584][T30381]  io_uring_setup+0x2c68/0x39c0
[ 2665.669488][T30381]  ? io_link_timeout_fn+0x480/0x480
[ 2665.674724][T30381]  ? __do_sys_io_uring_enter+0x1c00/0x1c00
[ 2665.680546][T30381]  ? io_queue_linked_timeout+0x1f0/0x1f0
[ 2665.686194][T30381]  ? wait_for_completion_io+0x260/0x260
[ 2665.691787][T30381]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2665.697706][T30381]  do_syscall_64+0x2d/0x70
[ 2665.702146][T30381]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2665.708057][T30381] RIP: 0033:0x45e149
05:55:28 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x10, r0, 0x83000000)

[ 2665.711959][T30381] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2665.731590][T30381] RSP: 002b:00007f8443111be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 2665.740036][T30381] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045e149
[ 2665.748020][T30381] RDX: 0000000020005000 RSI: 0000000020000080 RDI: 0000000000003fda
[ 2665.756000][T30381] RBP: 00007f8443111ca0 R08: 0000000020000140 R09: 0000000020000140
05:55:28 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x8000050)

[ 2665.763982][T30381] R10: 0000000020000100 R11: 0000000000000206 R12: 0000000020005000
[ 2665.771956][T30381] R13: 0000000020002000 R14: 0000000020000140 R15: 0000000020000100
[ 2665.801280][T30387] loop1: detected capacity change from 264192 to 0
05:55:28 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x10, r0, 0x83000000)

[ 2665.883881][T30387] loop1: detected capacity change from 264192 to 0
05:55:28 executing program 3 (fault-call:0 fault-nth:11):
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:28 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x9cd416ee00000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:28 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x15a0000)

05:55:28 executing program 5:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x83000000)

05:55:28 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x8000050)

05:55:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x400200, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f0000000180)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r3=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000280)={'ip_vti0\x00', <r4=>0x0, 0x7, 0x700, 0x5, 0x8, {{0x2a, 0x4, 0x1, 0x7, 0xa8, 0x68, 0x0, 0x6e, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @timestamp_prespec={0x44, 0x14, 0xfd, 0x3, 0xf, [{@broadcast, 0x2}, {@loopback}]}, @timestamp_prespec={0x44, 0x4, 0x39, 0x3, 0x6}, @generic={0x89, 0x6, "378dbfd4"}, @rr={0x7, 0x17, 0x94, [@dev={0xac, 0x14, 0x14, 0x1b}, @private=0xa010101, @rand_addr=0x64010102, @private=0xa010100, @local]}, @cipso={0x86, 0x5e, 0x3, [{0x5, 0x9, "92835c658e8417"}, {0x5, 0x9, "fe75d3af2805aa"}, {0x6, 0x6, "6ad5c274"}, {0x5, 0x10, "6ba65f3efdcd91e9b87c03eb7069"}, {0x0, 0xa, "b552518637cedd97"}, {0x2, 0x2}, {0x6, 0xe, "3a01b93a8bf43cd106551e4c"}, {0x0, 0xe, "aebec241430fd8d0ecf8f91b"}, {0x7, 0x8, "f290f76c907e"}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2400080}, 0xc, &(0x7f00000008c0)={&(0x7f0000000400)={0x4ac, 0x0, 0xf11, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x264, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xa3b7}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x44, 0x4, [{0x2, 0x2, 0x6, 0x7fff}, {0x15, 0x6, 0xc, 0x4}, {0x2, 0x0, 0x8d, 0x5}, {0x5, 0x4, 0x6}, {0x1f, 0x9, 0x3f}, {0xdc52, 0x5, 0x9, 0x6}, {0x3f, 0x0, 0x7, 0x6}, {0x3ff, 0xff, 0x5, 0x401}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r3}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x6, 0x7, 0x1, 0xffffffff}, {0x9, 0x31, 0x80, 0x3d}, {0x9, 0x3, 0xe5, 0x101}, {0x1, 0xfe, 0x3, 0x1f}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}]}}, {{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xcb84}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x400}, 0x40040)

05:55:28 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x7000000)

05:55:28 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0xfffffffffffffe8a, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}}, 0x8000050)

[ 2666.195377][T30413] FAULT_INJECTION: forcing a failure.
[ 2666.195377][T30413] name failslab, interval 1, probability 0, space 0, times 0
[ 2666.228062][T30414] loop1: detected capacity change from 264192 to 0
[ 2666.285339][T30413] CPU: 1 PID: 30413 Comm: syz-executor.3 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2666.295018][T30413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2666.305342][T30413] Call Trace:
[ 2666.308628][T30413]  dump_stack+0x107/0x163
[ 2666.313075][T30413]  should_fail.cold+0x5/0x1f
[ 2666.317700][T30413]  ? __kthread_create_on_node+0xd2/0x410
[ 2666.323355][T30413]  should_failslab+0x5/0x10
[ 2666.327880][T30413]  kmem_cache_alloc_trace+0x55/0x290
[ 2666.333224][T30413]  ? io_wq_for_each_worker.isra.0+0x370/0x370
[ 2666.339321][T30413]  __kthread_create_on_node+0xd2/0x410
[ 2666.344804][T30413]  ? __kthread_parkme+0x1e0/0x1e0
[ 2666.349866][T30413]  ? io_wq_create+0x5b3/0xa60
[ 2666.354562][T30413]  ? ___slab_alloc+0x280/0x790
[ 2666.359350][T30413]  ? find_held_lock+0x2d/0x110
[ 2666.364138][T30413]  ? io_wq_create+0x5b3/0xa60
[ 2666.368840][T30413]  ? io_wq_for_each_worker.isra.0+0x370/0x370
[ 2666.374967][T30413]  kthread_create_on_node+0xbb/0xf0
[ 2666.380203][T30413]  ? __kthread_create_on_node+0x410/0x410
[ 2666.385943][T30413]  ? lockdep_init_map_waits+0x26a/0x720
[ 2666.391572][T30413]  ? lockdep_init_map_waits+0x26a/0x720
[ 2666.397134][T30413]  ? __raw_spin_lock_init+0x34/0x100
[ 2666.402451][T30413]  io_wq_create+0x76a/0xa60
[ 2666.406982][T30413]  io_uring_setup+0x2c68/0x39c0
[ 2666.411864][T30413]  ? io_link_timeout_fn+0x480/0x480
[ 2666.417081][T30413]  ? __do_sys_io_uring_enter+0x1c00/0x1c00
[ 2666.422906][T30413]  ? io_queue_linked_timeout+0x1f0/0x1f0
[ 2666.428569][T30413]  ? wait_for_completion_io+0x260/0x260
[ 2666.434152][T30413]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2666.440168][T30413]  do_syscall_64+0x2d/0x70
[ 2666.444616][T30413]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2666.451200][T30413] RIP: 0033:0x45e149
[ 2666.455374][T30413] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2666.476441][T30413] RSP: 002b:00007f8443111be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
05:55:29 executing program 5:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x83000000)

05:55:29 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0xfffffffffffffe8a, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}}, 0x0)

05:55:29 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x20000000)

[ 2666.485042][T30413] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045e149
[ 2666.493769][T30413] RDX: 0000000020005000 RSI: 0000000020000080 RDI: 0000000000003fda
[ 2666.502994][T30413] RBP: 00007f8443111ca0 R08: 0000000020000140 R09: 0000000020000140
[ 2666.512094][T30413] R10: 0000000020000100 R11: 0000000000000206 R12: 0000000020005000
[ 2666.520455][T30413] R13: 0000000020002000 R14: 0000000020000140 R15: 0000000020000100
[ 2666.592386][T30414] loop1: detected capacity change from 264192 to 0
05:55:29 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x204, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x204}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)
r2 = userfaultfd(0x1800)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x6000, 0x1})

05:55:29 executing program 3 (fault-call:0 fault-nth:12):
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:29 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xf0ffffff00000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:29 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3a9}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000004)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @vsock={0x28, 0x0, 0x2711, @my=0x0}, @isdn={0x22, 0x8, 0x80, 0x3f, 0xfe}, @llc={0x1a, 0x312, 0x49, 0x0, 0xaf, 0x1, @local}, 0x8, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)='veth1_macvtap\x00', 0x2, 0x200, 0x8})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
socket$inet6_tcp(0xa, 0x1, 0x0)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x357aefc1c7fb5ee, &(0x7f0000000000)=0x6, 0x3ff, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000300)=0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00')
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)={0x20, 0x2, 0x4, 0x100, 0x1, {0x77359400}, {0x3, 0x0, 0x20, 0x20, 0x15, 0x41, "fa8bd8e6"}, 0xe0, 0x4, @offset=0xffffffff, 0xfffffff9})

05:55:29 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x21000000)

05:55:29 executing program 2:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)

05:55:29 executing program 5:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x83000000)

[ 2666.960625][T30444] loop1: detected capacity change from 264192 to 0
05:55:29 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0xff600000)

05:55:29 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3a9}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000004)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @vsock={0x28, 0x0, 0x2711, @my=0x0}, @isdn={0x22, 0x8, 0x80, 0x3f, 0xfe}, @llc={0x1a, 0x312, 0x49, 0x0, 0xaf, 0x1, @local}, 0x8, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)='veth1_macvtap\x00', 0x2, 0x200, 0x8})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
socket$inet6_tcp(0xa, 0x1, 0x0)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x357aefc1c7fb5ee, &(0x7f0000000000)=0x6, 0x3ff, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000300)=0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00')
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)={0x20, 0x2, 0x4, 0x100, 0x1, {0x77359400}, {0x3, 0x0, 0x20, 0x20, 0x15, 0x41, "fa8bd8e6"}, 0xe0, 0x4, @offset=0xffffffff, 0xfffffff9})

05:55:29 executing program 2:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)
clock_getres(0x5, &(0x7f0000000040))
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x8000, 0x0)

[ 2667.093199][T30444] loop1: detected capacity change from 264192 to 0
[ 2667.100086][T30454] FAULT_INJECTION: forcing a failure.
[ 2667.100086][T30454] name fail_usercopy, interval 1, probability 0, space 0, times 0
05:55:29 executing program 5:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x97ffffff00000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

[ 2667.162364][T30454] CPU: 1 PID: 30454 Comm: syz-executor.3 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2667.172077][T30454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2667.182160][T30454] Call Trace:
[ 2667.185450][T30454]  dump_stack+0x107/0x163
[ 2667.189806][T30454]  should_fail.cold+0x5/0x1f
[ 2667.194786][T30454]  _copy_to_user+0x2c/0x150
[ 2667.199316][T30454]  io_uring_setup+0x1c65/0x39c0
[ 2667.204205][T30454]  ? io_link_timeout_fn+0x480/0x480
[ 2667.209429][T30454]  ? __do_sys_io_uring_enter+0x1c00/0x1c00
[ 2667.215256][T30454]  ? io_queue_linked_timeout+0x1f0/0x1f0
[ 2667.220911][T30454]  ? wait_for_completion_io+0x260/0x260
[ 2667.226603][T30454]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2667.232521][T30454]  do_syscall_64+0x2d/0x70
[ 2667.236963][T30454]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2667.243771][T30454] RIP: 0033:0x45e149
05:55:29 executing program 2:
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'})
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000000))
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x6800c0, 0x0)
clock_gettime(0x0, &(0x7f0000000140)={<r1=>0x0, <r2=>0x0})
ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x24f, 0x3, 0x4, 0x4, 0x4, {r1, r2/1000+60000}, {0x4, 0x8, 0xff, 0x0, 0x0, 0x5, "57057475"}, 0x4, 0x2, @userptr=0x101, 0x4})
ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000000080))
r3 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x402, 0x0)
ioctl$CAPI_NCCI_OPENCOUNT(r3, 0x80044326, &(0x7f0000000100)=0x7)
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0xfff)

[ 2667.247678][T30454] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2667.267307][T30454] RSP: 002b:00007f8443111be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 2667.275742][T30454] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045e149
[ 2667.284772][T30454] RDX: 0000000020005000 RSI: 0000000020000080 RDI: 0000000000003fda
[ 2667.292757][T30454] RBP: 00007f8443111ca0 R08: 0000000020000140 R09: 0000000020000140
[ 2667.301508][T30454] R10: 0000000020000100 R11: 0000000000000206 R12: 0000000020005000
[ 2667.309491][T30454] R13: 0000000020002000 R14: 0000000020000140 R15: 0000000020000100
05:55:29 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3a9}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000004)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @vsock={0x28, 0x0, 0x2711, @my=0x0}, @isdn={0x22, 0x8, 0x80, 0x3f, 0xfe}, @llc={0x1a, 0x312, 0x49, 0x0, 0xaf, 0x1, @local}, 0x8, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)='veth1_macvtap\x00', 0x2, 0x200, 0x8})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
socket$inet6_tcp(0xa, 0x1, 0x0)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x357aefc1c7fb5ee, &(0x7f0000000000)=0x6, 0x3ff, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000300)=0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00')
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)={0x20, 0x2, 0x4, 0x100, 0x1, {0x77359400}, {0x3, 0x0, 0x20, 0x20, 0x15, 0x41, "fa8bd8e6"}, 0xe0, 0x4, @offset=0xffffffff, 0xfffffff9})

05:55:29 executing program 3 (fault-call:0 fault-nth:13):
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:30 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xf6ffffff00000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:30 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x2000000000)

[ 2667.415642][T30472] loop5: detected capacity change from 264192 to 0
05:55:30 executing program 2:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{0x0, 0x7, 0x7, 0xfffffffffffffffb, 0xa0f6, 0x6, 0x1f, 0x9, 0x80000001, 0x739b, 0x5, 0x3, 0x8, 0xffffffffffffec42, 0x80}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)

05:55:30 executing program 5:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x7a00000000000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:30 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3a9}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000004)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @vsock={0x28, 0x0, 0x2711, @my=0x0}, @isdn={0x22, 0x8, 0x80, 0x3f, 0xfe}, @llc={0x1a, 0x312, 0x49, 0x0, 0xaf, 0x1, @local}, 0x8, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)='veth1_macvtap\x00', 0x2, 0x200, 0x8})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
socket$inet6_tcp(0xa, 0x1, 0x0)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x357aefc1c7fb5ee, &(0x7f0000000000)=0x6, 0x3ff, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000300)=0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00')
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)={0x20, 0x2, 0x4, 0x100, 0x1, {0x77359400}, {0x3, 0x0, 0x20, 0x20, 0x15, 0x41, "fa8bd8e6"}, 0xe0, 0x4, @offset=0xffffffff, 0xfffffff9})

05:55:30 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x2100000000)

[ 2667.614731][T30487] loop1: detected capacity change from 264192 to 0
[ 2667.635762][T30485] FAULT_INJECTION: forcing a failure.
[ 2667.635762][T30485] name failslab, interval 1, probability 0, space 0, times 0
[ 2667.687282][T30485] CPU: 0 PID: 30485 Comm: syz-executor.3 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2667.696976][T30485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2667.707057][T30485] Call Trace:
[ 2667.710352][T30485]  dump_stack+0x107/0x163
[ 2667.714710][T30485]  should_fail.cold+0x5/0x1f
[ 2667.719329][T30485]  ? sock_alloc_inode+0x18/0x1c0
[ 2667.724303][T30485]  ? sock_alloc_inode+0x18/0x1c0
[ 2667.729260][T30485]  should_failslab+0x5/0x10
[ 2667.733790][T30485]  kmem_cache_alloc+0x5e/0x380
[ 2667.738580][T30485]  ? sock_free_inode+0x20/0x20
[ 2667.743369][T30485]  sock_alloc_inode+0x18/0x1c0
[ 2667.748153][T30485]  ? sock_free_inode+0x20/0x20
[ 2667.752930][T30485]  alloc_inode+0x61/0x230
[ 2667.757273][T30485]  new_inode_pseudo+0x14/0xe0
[ 2667.763341][T30485]  sock_alloc+0x3c/0x300
[ 2667.767626][T30485]  __sock_create+0xb9/0x820
[ 2667.773376][T30485]  io_uring_setup+0x1ca2/0x39c0
[ 2667.779386][T30485]  ? io_link_timeout_fn+0x480/0x480
[ 2667.785518][T30485]  ? __do_sys_io_uring_enter+0x1c00/0x1c00
[ 2667.792251][T30485]  ? io_queue_linked_timeout+0x1f0/0x1f0
[ 2667.798624][T30485]  ? wait_for_completion_io+0x260/0x260
[ 2667.804494][T30485]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2667.810708][T30485]  do_syscall_64+0x2d/0x70
[ 2667.816110][T30485]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2667.822463][T30485] RIP: 0033:0x45e149
[ 2667.826549][T30485] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2667.846176][T30485] RSP: 002b:00007f8443111be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 2667.855485][T30485] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045e149
[ 2667.863473][T30485] RDX: 0000000020005000 RSI: 0000000020000080 RDI: 0000000000003fda
[ 2667.871455][T30485] RBP: 00007f8443111ca0 R08: 0000000020000140 R09: 0000000020000140
[ 2667.880085][T30485] R10: 0000000020000100 R11: 0000000000000206 R12: 0000000020005000
05:55:30 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3a9}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000004)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @vsock={0x28, 0x0, 0x2711, @my=0x0}, @isdn={0x22, 0x8, 0x80, 0x3f, 0xfe}, @llc={0x1a, 0x312, 0x49, 0x0, 0xaf, 0x1, @local}, 0x8, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)='veth1_macvtap\x00', 0x2, 0x200, 0x8})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
socket$inet6_tcp(0xa, 0x1, 0x0)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x357aefc1c7fb5ee, &(0x7f0000000000)=0x6, 0x3ff, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000300)=0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00')

[ 2667.888082][T30485] R13: 0000000020002000 R14: 0000000020000140 R15: 0000000020000100
05:55:30 executing program 3 (fault-call:0 fault-nth:14):
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

[ 2667.932692][T30487] loop1: detected capacity change from 264192 to 0
[ 2667.942042][T30485] socket: no more sockets
[ 2667.969713][T30499] loop5: detected capacity change from 264192 to 0
05:55:30 executing program 2:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)
tgkill(0xffffffffffffffff, 0xffffffffffffffff, 0x1b)

05:55:30 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3a9}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000004)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @vsock={0x28, 0x0, 0x2711, @my=0x0}, @isdn={0x22, 0x8, 0x80, 0x3f, 0xfe}, @llc={0x1a, 0x312, 0x49, 0x0, 0xaf, 0x1, @local}, 0x8, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)='veth1_macvtap\x00', 0x2, 0x200, 0x8})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
socket$inet6_tcp(0xa, 0x1, 0x0)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x357aefc1c7fb5ee, &(0x7f0000000000)=0x6, 0x3ff, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000300)=0x10)

05:55:30 executing program 5:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getitimer(0x2, &(0x7f0000000000))
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4)
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil})

05:55:30 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xfcfdffff00000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:30 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x1a0100000000)

[ 2668.182219][T30510] FAULT_INJECTION: forcing a failure.
[ 2668.182219][T30510] name failslab, interval 1, probability 0, space 0, times 0
[ 2668.219974][T30510] CPU: 0 PID: 30510 Comm: syz-executor.3 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2668.229667][T30510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2668.239745][T30510] Call Trace:
[ 2668.243705][T30510]  dump_stack+0x107/0x163
[ 2668.248092][T30510]  should_fail.cold+0x5/0x1f
[ 2668.252713][T30510]  ? security_inode_alloc+0x34/0x160
[ 2668.258041][T30510]  ? security_inode_alloc+0x34/0x160
[ 2668.263349][T30510]  should_failslab+0x5/0x10
[ 2668.268053][T30510]  kmem_cache_alloc+0x5e/0x380
[ 2668.272844][T30510]  security_inode_alloc+0x34/0x160
[ 2668.278288][T30510]  inode_init_always+0x5a9/0xdb0
[ 2668.283280][T30510]  ? __init_waitqueue_head+0x97/0x110
[ 2668.289045][T30510]  alloc_inode+0x82/0x230
[ 2668.293389][T30510]  new_inode_pseudo+0x14/0xe0
[ 2668.298086][T30510]  sock_alloc+0x3c/0x300
[ 2668.302348][T30510]  __sock_create+0xb9/0x820
[ 2668.306879][T30510]  io_uring_setup+0x1ca2/0x39c0
[ 2668.311763][T30510]  ? io_link_timeout_fn+0x480/0x480
[ 2668.317890][T30510]  ? __do_sys_io_uring_enter+0x1c00/0x1c00
[ 2668.323723][T30510]  ? io_queue_linked_timeout+0x1f0/0x1f0
05:55:30 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3a9}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000004)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @vsock={0x28, 0x0, 0x2711, @my=0x0}, @isdn={0x22, 0x8, 0x80, 0x3f, 0xfe}, @llc={0x1a, 0x312, 0x49, 0x0, 0xaf, 0x1, @local}, 0x8, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)='veth1_macvtap\x00', 0x2, 0x200, 0x8})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
socket$inet6_tcp(0xa, 0x1, 0x0)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x357aefc1c7fb5ee, &(0x7f0000000000)=0x6, 0x3ff, 0x0)

05:55:30 executing program 5:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xf6ffffff00000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

[ 2668.329381][T30510]  ? wait_for_completion_io+0x260/0x260
[ 2668.335667][T30510]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2668.341592][T30510]  do_syscall_64+0x2d/0x70
[ 2668.346052][T30510]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2668.352303][T30510] RIP: 0033:0x45e149
[ 2668.356205][T30510] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2668.378294][T30510] RSP: 002b:00007f8443111be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 2668.386755][T30510] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045e149
[ 2668.395624][T30510] RDX: 0000000020005000 RSI: 0000000020000080 RDI: 0000000000003fda
[ 2668.403616][T30510] RBP: 00007f8443111ca0 R08: 0000000020000140 R09: 0000000020000140
[ 2668.411600][T30510] R10: 0000000020000100 R11: 0000000000000206 R12: 0000000020005000
[ 2668.419584][T30510] R13: 0000000020002000 R14: 0000000020000140 R15: 0000000020000100
05:55:31 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x400000000000)

[ 2668.486806][T30528] loop5: detected capacity change from 264192 to 0
05:55:31 executing program 2:
ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x13)

[ 2668.581250][T30530] loop1: detected capacity change from 264192 to 0
05:55:31 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3a9}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000004)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @vsock={0x28, 0x0, 0x2711, @my=0x0}, @isdn={0x22, 0x8, 0x80, 0x3f, 0xfe}, @llc={0x1a, 0x312, 0x49, 0x0, 0xaf, 0x1, @local}, 0x8, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)='veth1_macvtap\x00', 0x2, 0x200, 0x8})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x357aefc1c7fb5ee, &(0x7f0000000000)=0x6, 0x3ff, 0x0)

05:55:31 executing program 2:
madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3)

[ 2668.649004][T30510] socket: no more sockets
[ 2668.693356][T30530] loop1: detected capacity change from 264192 to 0
05:55:31 executing program 3 (fault-call:0 fault-nth:15):
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:31 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3a9}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000004)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @vsock={0x28, 0x0, 0x2711, @my=0x0}, @isdn={0x22, 0x8, 0x80, 0x3f, 0xfe}, @llc={0x1a, 0x312, 0x49, 0x0, 0xaf, 0x1, @local}, 0x8, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)='veth1_macvtap\x00', 0x2, 0x200, 0x8})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
socket$inet6_tcp(0xa, 0x1, 0x0)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x357aefc1c7fb5ee, &(0x7f0000000000)=0x6, 0x3ff, 0x0)

05:55:31 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xfdfdffff00000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:31 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x5a0100000000)

05:55:31 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3a9}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000004)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @vsock={0x28, 0x0, 0x2711, @my=0x0}, @isdn={0x22, 0x8, 0x80, 0x3f, 0xfe}, @llc={0x1a, 0x312, 0x49, 0x0, 0xaf, 0x1, @local}, 0x8, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)='veth1_macvtap\x00', 0x2, 0x200, 0x8})
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x357aefc1c7fb5ee, &(0x7f0000000000)=0x6, 0x3ff, 0x0)

05:55:31 executing program 5:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xfcfdffff00000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:31 executing program 2:
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})

[ 2668.937577][T30555] loop1: detected capacity change from 264192 to 0
[ 2668.951189][T30554] FAULT_INJECTION: forcing a failure.
[ 2668.951189][T30554] name failslab, interval 1, probability 0, space 0, times 0
05:55:31 executing program 2:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)
r0 = userfaultfd(0x100800)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000})

[ 2669.015341][T30554] CPU: 1 PID: 30554 Comm: syz-executor.3 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2669.025032][T30554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2669.035112][T30554] Call Trace:
[ 2669.038415][T30554]  dump_stack+0x107/0x163
[ 2669.043572][T30554]  should_fail.cold+0x5/0x1f
[ 2669.050643][T30554]  ? sk_prot_alloc+0x5f/0x2d0
[ 2669.056637][T30554]  ? sk_prot_alloc+0x5f/0x2d0
[ 2669.059557][T30555] loop1: detected capacity change from 264192 to 0
[ 2669.061319][T30554]  should_failslab+0x5/0x10
[ 2669.072301][T30554]  kmem_cache_alloc+0x5e/0x380
[ 2669.077091][T30554]  sk_prot_alloc+0x5f/0x2d0
[ 2669.081620][T30554]  sk_alloc+0x32/0xc60
[ 2669.087084][T30554]  unix_create1+0xbb/0x570
[ 2669.094313][T30554]  unix_create+0xf9/0x1e0
[ 2669.101366][T30554]  __sock_create+0x487/0x820
[ 2669.107106][T30554]  io_uring_setup+0x1ca2/0x39c0
[ 2669.113992][T30554]  ? io_link_timeout_fn+0x480/0x480
[ 2669.120513][T30554]  ? __do_sys_io_uring_enter+0x1c00/0x1c00
[ 2669.127554][T30554]  ? io_queue_linked_timeout+0x1f0/0x1f0
[ 2669.134260][T30554]  ? wait_for_completion_io+0x260/0x260
[ 2669.140038][T30554]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2669.148331][T30554]  do_syscall_64+0x2d/0x70
[ 2669.153715][T30554]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2669.160807][T30554] RIP: 0033:0x45e149
[ 2669.164711][T30554] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2669.184354][T30554] RSP: 002b:00007f8443111be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 2669.192785][T30554] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045e149
[ 2669.200767][T30554] RDX: 0000000020005000 RSI: 0000000020000080 RDI: 0000000000003fda
05:55:31 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x60ffffffffff)

05:55:31 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3a9}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000004)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x357aefc1c7fb5ee, &(0x7f0000000000)=0x6, 0x3ff, 0x0)

[ 2669.208749][T30554] RBP: 00007f8443111ca0 R08: 0000000020000140 R09: 0000000020000140
[ 2669.216751][T30554] R10: 0000000020000100 R11: 0000000000000206 R12: 0000000020005000
[ 2669.224754][T30554] R13: 0000000020002000 R14: 0000000020000140 R15: 0000000020000100
05:55:31 executing program 3 (fault-call:0 fault-nth:16):
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

[ 2669.373723][T30575] loop5: detected capacity change from 264192 to 0
05:55:32 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xfdffffff00000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:32 executing program 2:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
recvmsg$can_bcm(r0, &(0x7f00000018c0)={&(0x7f00000006c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000740)}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/155, 0x9b}, {&(0x7f0000001840)=""/51, 0x33}], 0x4}, 0x40000040)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001940)='batadv\x00')
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000005}, 0x400c000)
ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000180)=0x1)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080))
r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000140)={0x8, 0x6})
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x40})

05:55:32 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x7fffffffefff)

05:55:32 executing program 5:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x6c00000000000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:32 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x357aefc1c7fb5ee, &(0x7f0000000000)=0x6, 0x3ff, 0x0)

[ 2669.600036][T30587] loop1: detected capacity change from 264192 to 0
[ 2669.637948][T30586] FAULT_INJECTION: forcing a failure.
[ 2669.637948][T30586] name failslab, interval 1, probability 0, space 0, times 0
[ 2669.661317][T30586] CPU: 1 PID: 30586 Comm: syz-executor.3 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2669.661489][T30587] loop1: detected capacity change from 264192 to 0
[ 2669.671043][T30586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2669.671065][T30586] Call Trace:
[ 2669.671078][T30586]  dump_stack+0x107/0x163
[ 2669.671115][T30586]  should_fail.cold+0x5/0x1f
[ 2669.671149][T30586]  ? apparmor_sk_alloc_security+0x79/0x100
[ 2669.671173][T30586]  should_failslab+0x5/0x10
[ 2669.671199][T30586]  kmem_cache_alloc_trace+0x55/0x290
[ 2669.671229][T30586]  apparmor_sk_alloc_security+0x79/0x100
[ 2669.671255][T30586]  security_sk_alloc+0x50/0xb0
[ 2669.726010][T30586]  sk_prot_alloc+0xa9/0x2d0
[ 2669.730554][T30586]  sk_alloc+0x32/0xc60
[ 2669.734642][T30586]  unix_create1+0xbb/0x570
[ 2669.739079][T30586]  unix_create+0xf9/0x1e0
[ 2669.743429][T30586]  __sock_create+0x487/0x820
[ 2669.748545][T30586]  io_uring_setup+0x1ca2/0x39c0
[ 2669.753449][T30586]  ? io_link_timeout_fn+0x480/0x480
[ 2669.758663][T30586]  ? __do_sys_io_uring_enter+0x1c00/0x1c00
[ 2669.764488][T30586]  ? io_queue_linked_timeout+0x1f0/0x1f0
[ 2669.770132][T30586]  ? wait_for_completion_io+0x260/0x260
[ 2669.775836][T30586]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2669.781756][T30586]  do_syscall_64+0x2d/0x70
[ 2669.786195][T30586]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2669.792107][T30586] RIP: 0033:0x45e149
05:55:32 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x10750000000000)

[ 2669.792835][T30603] loop5: detected capacity change from 264192 to 0
[ 2669.796001][T30586] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2669.796028][T30586] RSP: 002b:00007f8443111be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 2669.796056][T30586] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045e149
[ 2669.796080][T30586] RDX: 0000000020005000 RSI: 0000000020000080 RDI: 0000000000003fda
05:55:32 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x357aefc1c7fb5ee, &(0x7f0000000000)=0x6, 0x3ff, 0x0)

[ 2669.796098][T30586] RBP: 00007f8443111ca0 R08: 0000000020000140 R09: 0000000020000140
[ 2669.796126][T30586] R10: 0000000020000100 R11: 0000000000000206 R12: 0000000020005000
[ 2669.796140][T30586] R13: 0000000020002000 R14: 0000000020000140 R15: 0000000020000100
05:55:32 executing program 3 (fault-call:0 fault-nth:17):
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:32 executing program 5:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8)

[ 2670.022129][T30612] FAULT_INJECTION: forcing a failure.
[ 2670.022129][T30612] name failslab, interval 1, probability 0, space 0, times 0
[ 2670.046297][T30612] CPU: 1 PID: 30612 Comm: syz-executor.3 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2670.056576][T30612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2670.066663][T30612] Call Trace:
[ 2670.069983][T30612]  dump_stack+0x107/0x163
[ 2670.074351][T30612]  should_fail.cold+0x5/0x1f
[ 2670.080157][T30612]  ? __d_alloc+0x2a/0x950
[ 2670.084509][T30612]  ? __d_alloc+0x2a/0x950
[ 2670.088854][T30612]  should_failslab+0x5/0x10
[ 2670.093377][T30612]  kmem_cache_alloc+0x5e/0x380
[ 2670.098177][T30612]  __d_alloc+0x2a/0x950
[ 2670.103458][T30612]  d_alloc_pseudo+0x19/0x70
[ 2670.108097][T30612]  alloc_file_pseudo+0xc6/0x250
[ 2670.113000][T30612]  ? rwlock_bug.part.0+0x90/0x90
[ 2670.118499][T30612]  ? alloc_file+0x5d0/0x5d0
[ 2670.123137][T30612]  ? do_raw_spin_unlock+0x171/0x230
[ 2670.128359][T30612]  ? _raw_spin_unlock+0x24/0x40
[ 2670.133862][T30612]  ? alloc_fd+0x2da/0x650
[ 2670.138235][T30612]  anon_inode_getfile+0xc8/0x1f0
[ 2670.143199][T30612]  io_uring_setup+0x28f7/0x39c0
[ 2670.148086][T30612]  ? io_link_timeout_fn+0x480/0x480
[ 2670.153313][T30612]  ? __do_sys_io_uring_enter+0x1c00/0x1c00
[ 2670.159146][T30612]  ? io_queue_linked_timeout+0x1f0/0x1f0
[ 2670.167384][T30612]  ? wait_for_completion_io+0x260/0x260
[ 2670.172968][T30612]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2670.179751][T30612]  do_syscall_64+0x2d/0x70
[ 2670.184189][T30612]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2670.190099][T30612] RIP: 0033:0x45e149
[ 2670.194003][T30612] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2670.213761][T30612] RSP: 002b:00007f8443111be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
05:55:32 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x80740000000000)

05:55:32 executing program 2:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)
r0 = getpgrp(0xffffffffffffffff)
wait4(r0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x1, <r1=>0xffffffffffffffff, 0x1})
ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f00000001c0)={0x0, 0x9, 0x7ff, &(0x7f0000000180)=0xffff})
r2 = getpgrp(0x0)
r3 = getpgrp(0xffffffffffffffff)
wait4(r3, 0x0, 0x0, 0x0)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x80200, 0x0)
ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000000240)={&(0x7f0000ffa000/0x1000)=nil, 0x1000})
getpgrp(r3)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
r5 = getpgrp(r2)
wait4(r5, 0x0, 0x0, 0x0)
move_pages(r5, 0x9, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff7000/0x2000)=nil], &(0x7f0000000080)=[0xe1, 0x9, 0xffffffff, 0x800, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2)

[ 2670.222188][T30612] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045e149
[ 2670.230444][T30612] RDX: 0000000020005000 RSI: 0000000020000080 RDI: 0000000000003fda
[ 2670.238689][T30612] RBP: 00007f8443111ca0 R08: 0000000020000140 R09: 0000000020000140
[ 2670.247658][T30612] R10: 0000000020000100 R11: 0000000000000206 R12: 0000000020005000
[ 2670.255642][T30612] R13: 0000000020002000 R14: 0000000020000140 R15: 0000000020000100
05:55:32 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xfeffffffffffffff, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:32 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x357aefc1c7fb5ee, &(0x7f0000000000)=0x6, 0x3ff, 0x0)

05:55:32 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x90540000000000)

05:55:33 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xff00000000000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:33 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x100000000000000)

05:55:33 executing program 3 (fault-call:0 fault-nth:18):
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:33 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xffffffff00000000, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:33 executing program 5:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8)

05:55:33 executing program 2:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)
socket$xdp(0x2c, 0x3, 0x0)
socket(0x10, 0x2, 0x9)
r0 = socket(0x11, 0x5, 0xfffff80c)
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb, 0x16093, r0, 0x180000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket$xdp(0x2c, 0x3, 0x0)

05:55:33 executing program 0:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x357aefc1c7fb5ee, &(0x7f0000000000)=0x6, 0x3ff, 0x0)

[ 2670.685106][T30637] FAULT_INJECTION: forcing a failure.
[ 2670.685106][T30637] name failslab, interval 1, probability 0, space 0, times 0
[ 2670.708240][T30637] CPU: 1 PID: 30637 Comm: syz-executor.3 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2670.718020][T30637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2670.728890][T30637] Call Trace:
[ 2670.732818][T30637]  dump_stack+0x107/0x163
[ 2670.737179][T30637]  should_fail.cold+0x5/0x1f
[ 2670.742470][T30637]  ? __alloc_file+0x21/0x280
[ 2670.747096][T30637]  ? __alloc_file+0x21/0x280
[ 2670.751710][T30637]  should_failslab+0x5/0x10
[ 2670.756231][T30637]  kmem_cache_alloc+0x5e/0x380
[ 2670.761013][T30637]  __alloc_file+0x21/0x280
[ 2670.765451][T30637]  alloc_empty_file+0x6d/0x170
[ 2670.770244][T30637]  alloc_file+0x93/0x5d0
[ 2670.774513][T30637]  alloc_file_pseudo+0x165/0x250
[ 2670.779510][T30637]  ? alloc_file+0x5d0/0x5d0
05:55:33 executing program 0:
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x357aefc1c7fb5ee, &(0x7f0000000000)=0x6, 0x3ff, 0x0)

[ 2670.784035][T30637]  ? _raw_spin_unlock+0x24/0x40
[ 2670.788902][T30637]  ? alloc_fd+0x2da/0x650
[ 2670.793246][T30637]  anon_inode_getfile+0xc8/0x1f0
[ 2670.798210][T30637]  io_uring_setup+0x28f7/0x39c0
[ 2670.803096][T30637]  ? io_link_timeout_fn+0x480/0x480
[ 2670.808316][T30637]  ? __do_sys_io_uring_enter+0x1c00/0x1c00
[ 2670.814134][T30637]  ? io_queue_linked_timeout+0x1f0/0x1f0
[ 2670.819778][T30637]  ? wait_for_completion_io+0x260/0x260
[ 2670.825367][T30637]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2670.831294][T30637]  do_syscall_64+0x2d/0x70
[ 2670.835741][T30637]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2670.842870][T30637] RIP: 0033:0x45e149
[ 2670.847330][T30637] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2670.867688][T30637] RSP: 002b:00007f8443111be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 2670.876244][T30637] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045e149
05:55:33 executing program 0:
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x6, 0x3ff, 0x0)

[ 2670.884227][T30637] RDX: 0000000020005000 RSI: 0000000020000080 RDI: 0000000000003fda
[ 2670.892203][T30637] RBP: 00007f8443111ca0 R08: 0000000020000140 R09: 0000000020000140
[ 2670.901274][T30637] R10: 0000000020000100 R11: 0000000000000206 R12: 0000000020005000
[ 2670.909257][T30637] R13: 0000000020002000 R14: 0000000020000140 R15: 0000000020000100
[ 2670.950034][T30649] loop1: detected capacity change from 264192 to 0
05:55:33 executing program 0:
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x6, 0x3ff, 0x0)

05:55:33 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x700000000000000)

05:55:33 executing program 5:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8)

05:55:33 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000180))
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000)={0x77359400}, 0x10)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)

[ 2671.054093][T30649] loop1: detected capacity change from 264192 to 0
05:55:33 executing program 3 (fault-call:0 fault-nth:19):
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:33 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffe, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:33 executing program 0:
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x6, 0x3ff, 0x0)

05:55:33 executing program 5:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)

05:55:33 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0xffefffffff7f0000)

[ 2671.286579][T30671] FAULT_INJECTION: forcing a failure.
[ 2671.286579][T30671] name failslab, interval 1, probability 0, space 0, times 0
[ 2671.324198][T30671] CPU: 1 PID: 30671 Comm: syz-executor.3 Not tainted 5.10.0-next-20201218-syzkaller #0
05:55:33 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0)
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2000, 0x92259a97894c2cd1})
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080))
ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000180)={0x0, 0x913, 0x3, &(0x7f0000000140)=0x200})

[ 2671.333888][T30671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2671.343966][T30671] Call Trace:
[ 2671.347259][T30671]  dump_stack+0x107/0x163
[ 2671.351622][T30671]  should_fail.cold+0x5/0x1f
[ 2671.356240][T30671]  ? security_file_alloc+0x34/0x170
[ 2671.361466][T30671]  ? security_file_alloc+0x34/0x170
[ 2671.366688][T30671]  should_failslab+0x5/0x10
[ 2671.371222][T30671]  kmem_cache_alloc+0x5e/0x380
[ 2671.376016][T30671]  security_file_alloc+0x34/0x170
[ 2671.381066][T30671]  __alloc_file+0xd8/0x280
[ 2671.385511][T30671]  alloc_empty_file+0x6d/0x170
[ 2671.390312][T30671]  alloc_file+0x93/0x5d0
[ 2671.394767][T30671]  alloc_file_pseudo+0x165/0x250
[ 2671.400277][T30671]  ? alloc_file+0x5d0/0x5d0
[ 2671.406153][T30671]  ? _raw_spin_unlock+0x24/0x40
[ 2671.411029][T30671]  ? alloc_fd+0x2da/0x650
[ 2671.416722][T30671]  anon_inode_getfile+0xc8/0x1f0
[ 2671.421694][T30671]  io_uring_setup+0x28f7/0x39c0
[ 2671.426576][T30671]  ? io_link_timeout_fn+0x480/0x480
05:55:33 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0xffffffffff600000)

[ 2671.431793][T30671]  ? __do_sys_io_uring_enter+0x1c00/0x1c00
[ 2671.440389][T30671]  ? io_queue_linked_timeout+0x1f0/0x1f0
[ 2671.447110][T30671]  ? wait_for_completion_io+0x260/0x260
[ 2671.452694][T30671]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2671.458623][T30671]  do_syscall_64+0x2d/0x70
[ 2671.464349][T30671]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2671.470423][T30671] RIP: 0033:0x45e149
[ 2671.474321][T30671] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2671.494734][T30671] RSP: 002b:00007f8443111be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 2671.504211][T30671] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045e149
[ 2671.513400][T30671] RDX: 0000000020005000 RSI: 0000000020000080 RDI: 0000000000003fda
[ 2671.522596][T30671] RBP: 00007f8443111ca0 R08: 0000000020000140 R09: 0000000020000140
05:55:34 executing program 0:
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x357aefc1c7fb5ee, 0x0, 0x3ff, 0x0)

[ 2671.530612][T30671] R10: 0000000020000100 R11: 0000000000000206 R12: 0000000020005000
[ 2671.538677][T30671] R13: 0000000020002000 R14: 0000000020000140 R15: 0000000020000100
05:55:34 executing program 5:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)

[ 2671.635071][T30687] loop1: detected capacity change from 264192 to 0
05:55:34 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="0fc79a5b9fa090c442652b1a660f38824e3b66baf80cb8c81c9d89ef66bafc0c66b8030066efb805000000b9000000000f01d9f3470f0967670fc77f7826f3400f09c4c239df54aa00b805000000b958b3d0390f01d9", 0x56}], 0x1, 0x60, &(0x7f00000000c0)=[@dstype3={0x7, 0x9}, @flags={0x3, 0x200}], 0x2)

05:55:34 executing program 0:
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x357aefc1c7fb5ee, 0x0, 0x0, 0x0)

05:55:34 executing program 2:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)
move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffb000/0x2000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2)
move_pages(0x0, 0x4, &(0x7f0000000200)=[&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff6000/0x4000)=nil], &(0x7f0000000240)=[0xffffffff, 0x9, 0x1, 0x7, 0xfff, 0x5], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x2)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x541001, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000300)='/dev/video#\x00', 0x5, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000480)={0x100, 0xd06, 0x1, {0x1, @win={{0x1, 0x7, 0xb903}, 0x7, 0x3, &(0x7f00000003c0)={{0x6, 0x4, 0x800}, &(0x7f0000000380)={{0xfffffff9, 0x7, 0x6, 0x7d7558d0}, &(0x7f0000000340)={{0x3, 0xddb, 0x9, 0x8}}}}, 0x10001, &(0x7f0000000400)="f1846412fed1a0e2c8c8b05d56085d0140bc6a0bbf5cfd4985c2b2fe0b927e6533b7d2c7ab6a9c7c1af52aa26657f44690f1b0cc7f08cb37f7b1750380a6d0e6ccc5c9074242ef1c1458324e8b76688315e45addfadabd797c31acc2d1712f25a0839b167a1c", 0x3}}, 0x40})
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000fef000/0x2000)=nil, 0x2000}, 0x2})
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x20000, 0x0)
syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000100)="662e0f9b2d4700c0fec4c22538a4bb0738d73f66baf80cb868998e8def66bafc0c66edde52d0c4c179110766b85a000f00d8670f001600000f0766baf80cb858dc308aef66bafc0cedc4e1d65d27", 0x4e}], 0x1, 0x2c, &(0x7f00000001c0)=[@dstype0={0x6, 0x8}], 0x1)

[ 2671.753780][T30687] loop1: detected capacity change from 264192 to 0
05:55:34 executing program 3 (fault-call:0 fault-nth:20):
syz_io_uring_setup(0x3fda, &(0x7f0000000080)={0x0, 0x92c9, 0x8}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))

05:55:34 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

05:55:34 executing program 5:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)

05:55:34 executing program 4:
r0 = getpgrp(0xffffffffffffffff)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x2})
move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x2)

05:55:34 executing program 0:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)
socket$xdp(0x2c, 0x3, 0x0)
socket(0x10, 0x2, 0x9)
r0 = socket(0x11, 0x5, 0xfffff80c)
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb, 0x16093, r0, 0x180000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket$xdp(0x2c, 0x3, 0x0)

05:55:34 executing program 2:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)
shmget(0x1, 0x12000, 0x1, &(0x7f0000fee000/0x12000)=nil)

05:55:34 executing program 5:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xfeffffffffffffff, 0x0, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

[ 2672.035263][T30711] FAULT_INJECTION: forcing a failure.
[ 2672.035263][T30711] name failslab, interval 1, probability 0, space 0, times 0
[ 2672.056722][T30712] loop1: detected capacity change from 264192 to 0
[ 2672.100586][T30711] CPU: 1 PID: 30711 Comm: syz-executor.3 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2672.110298][T30711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2672.120372][T30711] Call Trace:
[ 2672.123664][T30711]  dump_stack+0x107/0x163
[ 2672.128034][T30711]  should_fail.cold+0x5/0x1f
[ 2672.133521][T30711]  ? io_uring_alloc_task_context+0x43/0x2a0
[ 2672.139448][T30711]  should_failslab+0x5/0x10
[ 2672.143972][T30711]  kmem_cache_alloc_trace+0x55/0x290
[ 2672.149410][T30711]  io_uring_alloc_task_context+0x43/0x2a0
[ 2672.155158][T30711]  io_uring_add_task_file+0x1ed/0x280
[ 2672.160576][T30711]  io_uring_setup+0x296b/0x39c0
[ 2672.165453][T30711]  ? io_link_timeout_fn+0x480/0x480
[ 2672.170679][T30711]  ? __do_sys_io_uring_enter+0x1c00/0x1c00
[ 2672.176553][T30711]  ? io_queue_linked_timeout+0x1f0/0x1f0
[ 2672.182923][T30711]  ? wait_for_completion_io+0x260/0x260
[ 2672.188509][T30711]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2672.194428][T30711]  do_syscall_64+0x2d/0x70
[ 2672.198870][T30711]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2672.204793][T30711] RIP: 0033:0x45e149
[ 2672.208928][T30711] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2672.228567][T30711] RSP: 002b:00007f8443111be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 2672.237011][T30711] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045e149
05:55:34 executing program 1:
syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000100), 0x2040, &(0x7f00000001c0)=ANY=[])

[ 2672.245013][T30711] RDX: 0000000020005000 RSI: 0000000020000080 RDI: 0000000000003fda
[ 2672.253004][T30711] RBP: 00007f8443111ca0 R08: 0000000020000140 R09: 0000000020000140
[ 2672.260990][T30711] R10: 0000000020000100 R11: 0000000000000206 R12: 0000000020005000
[ 2672.268975][T30711] R13: 0000000020002000 R14: 0000000020000140 R15: 0000000020000100
05:55:34 executing program 4:
move_pages(0x0, 0x61, 0x0, 0x0, 0x0, 0x0)
write$nbd(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="67446698010000000000040004000000185f0e4a4515e8e38be6ca283c0dad4b6eb4be24c3f3a98b6f09be80e2038745e416ad1ef8f8633dcc5400a109009895d4755778192cc21d6eec2e090ae5a4e82e717d3a1f623ca8462de755ae93e8"], 0x5f)

05:55:34 executing program 2:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6b)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x20, 0x5e1083)
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card0/oss_mixer\x00', 0x40, 0x0)
write$proc_mixer(r0, &(0x7f0000000140)=[{'PCM', @void}], 0x4)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x48440, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080))
ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000080)={0x0, 0x1ff, 0x6, &(0x7f0000000040)=0x63f66738})

[ 2672.363126][T30711] ------------[ cut here ]------------
[ 2672.369136][T30711] percpu_ref_kill_and_confirm called more than once on io_ring_ctx_ref_free!
[ 2672.369591][T30711] WARNING: CPU: 1 PID: 30711 at lib/percpu-refcount.c:382 percpu_ref_kill_and_confirm+0x169/0x1d0
[ 2672.390107][T30711] Modules linked in:
[ 2672.394013][T30711] CPU: 1 PID: 30711 Comm: syz-executor.3 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2672.404892][T30711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2672.415019][T30711] RIP: 0010:percpu_ref_kill_and_confirm+0x169/0x1d0
[ 2672.422722][T30711] Code: 5d 08 48 8d 7b 08 48 89 fa 48 c1 ea 03 80 3c 02 00 75 68 48 8b 53 08 48 c7 c6 e0 54 bf 89 48 c7 c7 00 54 bf 89 e8 15 ed 09 05 <0f> 0b 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 80 3c 02
[ 2672.442708][T30711] RSP: 0018:ffffc900163afe10 EFLAGS: 00010086
[ 2672.448800][T30711] RAX: 0000000000000000 RBX: ffff8880227b4200 RCX: 0000000000000000
[ 2672.456790][T30711] RDX: 0000000000040000 RSI: ffffffff815b95f5 RDI: fffff52002c75fb4
[ 2672.464779][T30711] RBP: ffff88804f940000 R08: 0000000000000000 R09: 0000000000000000
[ 2672.472759][T30711] R10: ffffffff815b7a4b R11: 0000000000000000 R12: 0000000000000246
[ 2672.480755][T30711] R13: 0000000000000000 R14: 0000000000000002 R15: ffff888052b408d0
[ 2672.488963][T30711] FS:  00007f8443112700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
[ 2672.497906][T30711] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2672.504523][T30711] CR2: 000000000074ab98 CR3: 000000001ecc9000 CR4: 00000000001506e0
[ 2672.512520][T30711] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2672.520498][T30711] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 2672.528481][T30711] Call Trace:
[ 2672.532589][T30711]  io_ring_ctx_wait_and_kill+0x31/0x560
[ 2672.538168][T30711]  io_uring_release+0x3e/0x50
[ 2672.542865][T30711]  __fput+0x283/0x920
[ 2672.546864][T30711]  ? io_ring_ctx_wait_and_kill+0x560/0x560
[ 2672.553815][T30711]  task_work_run+0xdd/0x190
[ 2672.558340][T30711]  exit_to_user_mode_prepare+0x1f0/0x200
[ 2672.563992][T30711]  syscall_exit_to_user_mode+0x19/0x50
[ 2672.569463][T30711]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2672.575534][T30711] RIP: 0033:0x45e149
[ 2672.579703][T30711] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2672.599418][T30711] RSP: 002b:00007f8443111be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 2672.608363][T30711] RAX: fffffffffffffff4 RBX: 0000000020000080 RCX: 000000000045e149
[ 2672.617045][T30711] RDX: 0000000020005000 RSI: 0000000020000080 RDI: 0000000000003fda
[ 2672.625777][T30711] RBP: 00007f8443111ca0 R08: 0000000020000140 R09: 0000000020000140
[ 2672.634470][T30711] R10: 0000000020000100 R11: 0000000000000206 R12: 0000000020005000
[ 2672.642837][T30711] R13: 0000000020002000 R14: 0000000020000140 R15: 0000000020000100
[ 2672.650837][T30711] Kernel panic - not syncing: panic_on_warn set ...
[ 2672.657425][T30711] CPU: 1 PID: 30711 Comm: syz-executor.3 Not tainted 5.10.0-next-20201218-syzkaller #0
[ 2672.667853][T30711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2672.677920][T30711] Call Trace:
[ 2672.681202][T30711]  dump_stack+0x107/0x163
[ 2672.685555][T30711]  panic+0x343/0x77f
[ 2672.689626][T30711]  ? __warn_printk+0xf3/0xf3
[ 2672.694240][T30711]  ? __warn.cold+0x1a/0x44
[ 2672.698672][T30711]  ? percpu_ref_kill_and_confirm+0x169/0x1d0
[ 2672.704676][T30711]  __warn.cold+0x35/0x44
[ 2672.709087][T30711]  ? percpu_ref_kill_and_confirm+0x169/0x1d0
[ 2672.715106][T30711]  report_bug+0x1bd/0x210
[ 2672.719468][T30711]  handle_bug+0x3c/0x60
[ 2672.723639][T30711]  exc_invalid_op+0x14/0x40
[ 2672.728161][T30711]  asm_exc_invalid_op+0x12/0x20
[ 2672.733141][T30711] RIP: 0010:percpu_ref_kill_and_confirm+0x169/0x1d0
[ 2672.739847][T30711] Code: 5d 08 48 8d 7b 08 48 89 fa 48 c1 ea 03 80 3c 02 00 75 68 48 8b 53 08 48 c7 c6 e0 54 bf 89 48 c7 c7 00 54 bf 89 e8 15 ed 09 05 <0f> 0b 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 80 3c 02
[ 2672.759451][T30711] RSP: 0018:ffffc900163afe10 EFLAGS: 00010086
[ 2672.765530][T30711] RAX: 0000000000000000 RBX: ffff8880227b4200 RCX: 0000000000000000
[ 2672.773492][T30711] RDX: 0000000000040000 RSI: ffffffff815b95f5 RDI: fffff52002c75fb4
[ 2672.781450][T30711] RBP: ffff88804f940000 R08: 0000000000000000 R09: 0000000000000000
[ 2672.789409][T30711] R10: ffffffff815b7a4b R11: 0000000000000000 R12: 0000000000000246
[ 2672.797368][T30711] R13: 0000000000000000 R14: 0000000000000002 R15: ffff888052b408d0
[ 2672.805336][T30711]  ? wake_up_klogd+0xcb/0x100
[ 2672.810016][T30711]  ? vprintk_func+0x95/0x1e0
[ 2672.814600][T30711]  io_ring_ctx_wait_and_kill+0x31/0x560
[ 2672.820147][T30711]  io_uring_release+0x3e/0x50
[ 2672.824841][T30711]  __fput+0x283/0x920
[ 2672.828828][T30711]  ? io_ring_ctx_wait_and_kill+0x560/0x560
[ 2672.834676][T30711]  task_work_run+0xdd/0x190
[ 2672.839201][T30711]  exit_to_user_mode_prepare+0x1f0/0x200
[ 2672.844843][T30711]  syscall_exit_to_user_mode+0x19/0x50
[ 2672.850300][T30711]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2672.856203][T30711] RIP: 0033:0x45e149
[ 2672.860087][T30711] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2672.879714][T30711] RSP: 002b:00007f8443111be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 2672.888122][T30711] RAX: fffffffffffffff4 RBX: 0000000020000080 RCX: 000000000045e149
[ 2672.896094][T30711] RDX: 0000000020005000 RSI: 0000000020000080 RDI: 0000000000003fda
[ 2672.904051][T30711] RBP: 00007f8443111ca0 R08: 0000000020000140 R09: 0000000020000140
[ 2672.912009][T30711] R10: 0000000020000100 R11: 0000000000000206 R12: 0000000020005000
[ 2672.919981][T30711] R13: 0000000020002000 R14: 0000000020000140 R15: 0000000020000100
[ 2672.928942][T30711] Kernel Offset: disabled
[ 2672.933464][T30711] Rebooting in 86400 seconds..