Warning: Permanently added '[localhost]:59576' (ECDSA) to the list of known hosts. 2022/09/12 13:01:34 fuzzer started 2022/09/12 13:01:35 dialing manager at localhost:38027 syzkaller login: [ 44.325306] cgroup: Unknown subsys name 'net' [ 44.414388] cgroup: Unknown subsys name 'rlimit' 2022/09/12 13:01:48 syscalls: 2215 2022/09/12 13:01:48 code coverage: enabled 2022/09/12 13:01:48 comparison tracing: enabled 2022/09/12 13:01:48 extra coverage: enabled 2022/09/12 13:01:48 setuid sandbox: enabled 2022/09/12 13:01:48 namespace sandbox: enabled 2022/09/12 13:01:48 Android sandbox: enabled 2022/09/12 13:01:48 fault injection: enabled 2022/09/12 13:01:48 leak checking: enabled 2022/09/12 13:01:48 net packet injection: enabled 2022/09/12 13:01:48 net device setup: enabled 2022/09/12 13:01:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/12 13:01:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/12 13:01:48 USB emulation: enabled 2022/09/12 13:01:48 hci packet injection: enabled 2022/09/12 13:01:48 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220912) 2022/09/12 13:01:48 802.15.4 emulation: enabled 2022/09/12 13:01:48 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/12 13:01:49 fetching corpus: 50, signal 33595/34019 (executing program) 2022/09/12 13:01:49 fetching corpus: 54, signal 34358/34895 (executing program) 2022/09/12 13:01:49 fetching corpus: 54, signal 34358/35070 (executing program) 2022/09/12 13:01:49 fetching corpus: 54, signal 34358/35237 (executing program) 2022/09/12 13:01:49 fetching corpus: 54, signal 34358/35408 (executing program) 2022/09/12 13:01:49 fetching corpus: 54, signal 34358/35595 (executing program) 2022/09/12 13:01:49 fetching corpus: 54, signal 34358/35750 (executing program) 2022/09/12 13:01:49 fetching corpus: 54, signal 34358/35947 (executing program) 2022/09/12 13:01:49 fetching corpus: 54, signal 34358/36127 (executing program) 2022/09/12 13:01:49 fetching corpus: 54, signal 34358/36282 (executing program) 2022/09/12 13:01:49 fetching corpus: 54, signal 34358/36446 (executing program) 2022/09/12 13:01:49 fetching corpus: 54, signal 34358/36624 (executing program) 2022/09/12 13:01:49 fetching corpus: 54, signal 34358/36796 (executing program) 2022/09/12 13:01:49 fetching corpus: 54, signal 34358/36957 (executing program) 2022/09/12 13:01:49 fetching corpus: 54, signal 34358/37134 (executing program) 2022/09/12 13:01:49 fetching corpus: 54, signal 34358/37303 (executing program) 2022/09/12 13:01:49 fetching corpus: 54, signal 34358/37456 (executing program) 2022/09/12 13:01:49 fetching corpus: 54, signal 34358/37603 (executing program) 2022/09/12 13:01:49 fetching corpus: 54, signal 34358/37603 (executing program) 2022/09/12 13:01:52 starting 8 fuzzer processes 13:01:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000140)=@req={0x28, &(0x7f0000000100)={'wg0\x00', @ifru_hwaddr=@random}}) 13:01:52 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0xfe2c, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:01:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1340b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) 13:01:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012900)) 13:01:52 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x10000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1) io_setup(0x9, &(0x7f0000000040)=0x0) io_cancel(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0xa, 0xffffffffffffffff, &(0x7f0000000180)="c708121d493f59aaba42597d2967d020e650c36393335178ac8b39102cd2c9140de8af68972a597a1932c702a4d94c4da657b46bf0c8365e1badd6caca3d57380c7d15b39441f5b78bd8373291b5a411d3dec121ddff45957d2376ba3745eebc09eefc0c47a10d9bebc41ef277cf85da69f66277ac480d566e9012eb9d6ba91ff47c3a6cded1cfa66994b4ba40725e75b441fe7c16944ab7baa495e87a34577bb857311de40eaab3d9a27d5116379522ce1a03d06adeb878f8de063f0338f144f7ede98f127240dabc6656351abb4f1050624ac4935632cffc8cbaf81cfe36c572c8d0cbaa20907dba0c899e63a6eb3668986f30a668", 0xf6, 0x1000, 0x0, 0x4, r1}, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r4, &(0x7f00000005c0)='\x00', 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000100, 0x3}, 0x15182, 0x7, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, 0x5, r4, 0x8) write(r3, &(0x7f0000000380)="1c1016382f3e5e84315640b24787dc5a68b49bc9293d06aa522079431663e28e2e3c9a44c598a7b7881d96d8bd966b049e6c111bd94692c67e3fb5a4cf84d89cfd935d6becdd725292a25a5cde46f2be588d3bd7fa38d861fb707777a92d917b8ef37e850790a888da4ac85f83bee96c5c263cc6de0eb37c12cefd91c1c79e60657560b8839a14a84c1511db42fed316750610940be3", 0x96) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) [ 61.142203] audit: type=1400 audit(1662987712.238:6): avc: denied { execmem } for pid=288 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:01:52 executing program 5: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x80000001, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x6, 0x1000, 0x1) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0), 0x7, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x6559, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x0, 0xffffffffffffff26, 0x4) get_mempolicy(0x0, &(0x7f0000000280), 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x5) remap_file_pages(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x0, 0x8d, 0x40000) 13:01:52 executing program 7: ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x40042409, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) clone3(&(0x7f0000000700)={0x4000, 0x0, &(0x7f0000000400), &(0x7f0000000440), {}, &(0x7f0000000480)=""/207, 0xcf, 0x0, &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x3}, 0x58) 13:01:52 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x500, 0x0, 0x1, 0xb}, 0x20) [ 62.557048] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.559781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.561312] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.562647] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.564744] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.566206] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.567291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.568643] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.569856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.571114] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.609274] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 62.611142] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 62.612832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 62.613983] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 62.615520] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 62.616802] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 62.620564] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 62.621955] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 62.624335] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 62.625553] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.626607] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 62.628195] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 62.629386] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.630538] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 62.635777] Bluetooth: hci5: HCI_REQ-0x0c1a [ 62.640797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.649971] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.650330] Bluetooth: hci6: HCI_REQ-0x0c1a [ 62.656400] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 62.657564] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.658699] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.660568] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.662895] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.667569] Bluetooth: hci0: HCI_REQ-0x0c1a [ 62.668495] Bluetooth: hci1: HCI_REQ-0x0c1a [ 62.681251] Bluetooth: hci3: HCI_REQ-0x0c1a [ 62.688668] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.692725] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.694958] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.696494] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.700025] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.702407] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 62.704032] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.706288] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 62.708676] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 62.710228] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 62.713605] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 62.717832] Bluetooth: hci4: HCI_REQ-0x0c1a [ 62.719054] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 62.720812] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 62.728618] Bluetooth: hci7: HCI_REQ-0x0c1a [ 62.788212] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.791567] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.793901] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.795398] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.799617] Bluetooth: hci2: HCI_REQ-0x0c1a [ 64.682775] Bluetooth: hci0: command 0x0409 tx timeout [ 64.682772] Bluetooth: hci1: command 0x0409 tx timeout [ 64.685006] Bluetooth: hci6: command 0x0409 tx timeout [ 64.685829] Bluetooth: hci5: command 0x0409 tx timeout [ 64.746282] Bluetooth: hci4: command 0x0409 tx timeout [ 64.749471] Bluetooth: hci3: command 0x0409 tx timeout [ 64.810144] Bluetooth: hci2: command 0x0409 tx timeout [ 64.811000] Bluetooth: hci7: command 0x0409 tx timeout [ 66.730140] Bluetooth: hci5: command 0x041b tx timeout [ 66.730676] Bluetooth: hci6: command 0x041b tx timeout [ 66.732630] Bluetooth: hci1: command 0x041b tx timeout [ 66.733610] Bluetooth: hci0: command 0x041b tx timeout [ 66.794288] Bluetooth: hci3: command 0x041b tx timeout [ 66.796663] Bluetooth: hci4: command 0x041b tx timeout [ 66.858160] Bluetooth: hci7: command 0x041b tx timeout [ 66.859112] Bluetooth: hci2: command 0x041b tx timeout [ 68.778128] Bluetooth: hci0: command 0x040f tx timeout [ 68.778658] Bluetooth: hci1: command 0x040f tx timeout [ 68.779755] Bluetooth: hci6: command 0x040f tx timeout [ 68.781676] Bluetooth: hci5: command 0x040f tx timeout [ 68.842294] Bluetooth: hci4: command 0x040f tx timeout [ 68.844376] Bluetooth: hci3: command 0x040f tx timeout [ 68.906155] Bluetooth: hci2: command 0x040f tx timeout [ 68.906720] Bluetooth: hci7: command 0x040f tx timeout [ 70.826123] Bluetooth: hci5: command 0x0419 tx timeout [ 70.826740] Bluetooth: hci6: command 0x0419 tx timeout [ 70.828678] Bluetooth: hci1: command 0x0419 tx timeout [ 70.829710] Bluetooth: hci0: command 0x0419 tx timeout [ 70.890172] Bluetooth: hci3: command 0x0419 tx timeout [ 70.891787] Bluetooth: hci4: command 0x0419 tx timeout [ 70.954169] Bluetooth: hci7: command 0x0419 tx timeout [ 70.954744] Bluetooth: hci2: command 0x0419 tx timeout [ 113.806815] audit: type=1400 audit(1662987764.908:7): avc: denied { open } for pid=3849 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 113.808400] audit: type=1400 audit(1662987764.908:8): avc: denied { kernel } for pid=3849 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 113.825992] ------------[ cut here ]------------ [ 113.826017] [ 113.826021] ====================================================== [ 113.826025] WARNING: possible circular locking dependency detected [ 113.826029] 6.0.0-rc5-next-20220912 #1 Not tainted [ 113.826036] ------------------------------------------------------ [ 113.826040] syz-executor.4/3850 is trying to acquire lock: [ 113.826048] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 113.826092] [ 113.826092] but task is already holding lock: [ 113.826095] ffff88800f235420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 113.826123] [ 113.826123] which lock already depends on the new lock. [ 113.826123] [ 113.826126] [ 113.826126] the existing dependency chain (in reverse order) is: [ 113.826130] [ 113.826130] -> #3 (&ctx->lock){....}-{2:2}: [ 113.826144] _raw_spin_lock+0x2a/0x40 [ 113.826161] __perf_event_task_sched_out+0x53b/0x18d0 [ 113.826174] __schedule+0xedd/0x2470 [ 113.826184] schedule+0xda/0x1b0 [ 113.826194] exit_to_user_mode_prepare+0x114/0x1a0 [ 113.826215] syscall_exit_to_user_mode+0x19/0x40 [ 113.826233] do_syscall_64+0x48/0x90 [ 113.826247] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 113.826265] [ 113.826265] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 113.826279] _raw_spin_lock_nested+0x30/0x40 [ 113.826294] raw_spin_rq_lock_nested+0x1e/0x30 [ 113.826307] task_fork_fair+0x63/0x4d0 [ 113.826325] sched_cgroup_fork+0x3d0/0x540 [ 113.826340] copy_process+0x3f9e/0x6df0 [ 113.826350] kernel_clone+0xe7/0x890 [ 113.826360] user_mode_thread+0xad/0xf0 [ 113.826371] rest_init+0x24/0x250 [ 113.826387] arch_call_rest_init+0xf/0x14 [ 113.826407] start_kernel+0x4c1/0x4e6 [ 113.826424] secondary_startup_64_no_verify+0xe0/0xeb [ 113.826439] [ 113.826439] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 113.826453] _raw_spin_lock_irqsave+0x39/0x60 [ 113.826468] try_to_wake_up+0xab/0x1920 [ 113.826482] up+0x75/0xb0 [ 113.826494] __up_console_sem+0x6e/0x80 [ 113.826511] console_unlock+0x46a/0x590 [ 113.826527] vt_ioctl+0x2822/0x2ca0 [ 113.826540] tty_ioctl+0x7c4/0x1700 [ 113.826552] __x64_sys_ioctl+0x19a/0x210 [ 113.826567] do_syscall_64+0x3b/0x90 [ 113.826580] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 113.826597] [ 113.826597] -> #0 ((console_sem).lock){....}-{2:2}: [ 113.826611] __lock_acquire+0x2a02/0x5e70 [ 113.826628] lock_acquire+0x1a2/0x530 [ 113.826645] _raw_spin_lock_irqsave+0x39/0x60 [ 113.826660] down_trylock+0xe/0x70 [ 113.826673] __down_trylock_console_sem+0x3b/0xd0 [ 113.826690] vprintk_emit+0x16b/0x560 [ 113.826707] vprintk+0x84/0xa0 [ 113.826724] _printk+0xba/0xf1 [ 113.826742] report_bug.cold+0x72/0xab [ 113.826754] handle_bug+0x3c/0x70 [ 113.826767] exc_invalid_op+0x14/0x50 [ 113.826780] asm_exc_invalid_op+0x16/0x20 [ 113.826796] group_sched_out.part.0+0x2c7/0x460 [ 113.826807] ctx_sched_out+0x8f1/0xc10 [ 113.826817] __perf_event_task_sched_out+0x6d0/0x18d0 [ 113.826830] __schedule+0xedd/0x2470 [ 113.826839] schedule+0xda/0x1b0 [ 113.826849] exit_to_user_mode_prepare+0x114/0x1a0 [ 113.826868] syscall_exit_to_user_mode+0x19/0x40 [ 113.826886] do_syscall_64+0x48/0x90 [ 113.826898] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 113.826916] [ 113.826916] other info that might help us debug this: [ 113.826916] [ 113.826918] Chain exists of: [ 113.826918] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 113.826918] [ 113.826934] Possible unsafe locking scenario: [ 113.826934] [ 113.826936] CPU0 CPU1 [ 113.826939] ---- ---- [ 113.826941] lock(&ctx->lock); [ 113.826947] lock(&rq->__lock); [ 113.826953] lock(&ctx->lock); [ 113.826960] lock((console_sem).lock); [ 113.826965] [ 113.826965] *** DEADLOCK *** [ 113.826965] [ 113.826967] 2 locks held by syz-executor.4/3850: [ 113.826974] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 113.827000] #1: ffff88800f235420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 113.827028] [ 113.827028] stack backtrace: [ 113.827032] CPU: 0 PID: 3850 Comm: syz-executor.4 Not tainted 6.0.0-rc5-next-20220912 #1 [ 113.827045] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 113.827053] Call Trace: [ 113.827057] [ 113.827061] dump_stack_lvl+0x8b/0xb3 [ 113.827076] check_noncircular+0x263/0x2e0 [ 113.827093] ? format_decode+0x26c/0xb50 [ 113.827108] ? print_circular_bug+0x450/0x450 [ 113.827126] ? enable_ptr_key_workfn+0x20/0x20 [ 113.827141] ? perf_swevent_event+0x6c/0x550 [ 113.827160] ? format_decode+0x26c/0xb50 [ 113.827176] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 113.827194] __lock_acquire+0x2a02/0x5e70 [ 113.827217] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 113.827243] lock_acquire+0x1a2/0x530 [ 113.827262] ? down_trylock+0xe/0x70 [ 113.827277] ? rcu_read_unlock+0x40/0x40 [ 113.827299] ? vprintk+0x84/0xa0 [ 113.827318] _raw_spin_lock_irqsave+0x39/0x60 [ 113.827334] ? down_trylock+0xe/0x70 [ 113.827347] down_trylock+0xe/0x70 [ 113.827361] ? vprintk+0x84/0xa0 [ 113.827379] __down_trylock_console_sem+0x3b/0xd0 [ 113.827397] vprintk_emit+0x16b/0x560 [ 113.827417] vprintk+0x84/0xa0 [ 113.827435] _printk+0xba/0xf1 [ 113.827453] ? record_print_text.cold+0x16/0x16 [ 113.827476] ? report_bug.cold+0x66/0xab [ 113.827490] ? group_sched_out.part.0+0x2c7/0x460 [ 113.827502] report_bug.cold+0x72/0xab [ 113.827517] handle_bug+0x3c/0x70 [ 113.827531] exc_invalid_op+0x14/0x50 [ 113.827545] asm_exc_invalid_op+0x16/0x20 [ 113.827563] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 113.827576] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 113.827588] RSP: 0018:ffff88801a507c48 EFLAGS: 00010006 [ 113.827598] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 113.827605] RDX: ffff888038a75040 RSI: ffffffff81566027 RDI: 0000000000000005 [ 113.827614] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 113.827621] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff88800f235400 [ 113.827629] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 113.827641] ? group_sched_out.part.0+0x2c7/0x460 [ 113.827654] ? group_sched_out.part.0+0x2c7/0x460 [ 113.827667] ctx_sched_out+0x8f1/0xc10 [ 113.827680] __perf_event_task_sched_out+0x6d0/0x18d0 [ 113.827695] ? lock_is_held_type+0xd7/0x130 [ 113.827715] ? __perf_cgroup_move+0x160/0x160 [ 113.827727] ? set_next_entity+0x304/0x550 [ 113.827745] ? update_curr+0x267/0x740 [ 113.827764] ? lock_is_held_type+0xd7/0x130 [ 113.827783] __schedule+0xedd/0x2470 [ 113.827796] ? io_schedule_timeout+0x150/0x150 [ 113.827808] ? trace_rcu_dyntick+0x1a7/0x250 [ 113.827831] schedule+0xda/0x1b0 [ 113.827841] exit_to_user_mode_prepare+0x114/0x1a0 [ 113.827863] syscall_exit_to_user_mode+0x19/0x40 [ 113.827881] do_syscall_64+0x48/0x90 [ 113.827896] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 113.827913] RIP: 0033:0x7fa3626c7b19 [ 113.827922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 113.827933] RSP: 002b:00007fa35fc3d218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 113.827944] RAX: 0000000000000001 RBX: 00007fa3627daf68 RCX: 00007fa3626c7b19 [ 113.827952] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa3627daf6c [ 113.827960] RBP: 00007fa3627daf60 R08: 000000000000000e R09: 0000000000000000 [ 113.827968] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fa3627daf6c [ 113.827975] R13: 00007ffd41b9644f R14: 00007fa35fc3d300 R15: 0000000000022000 [ 113.827988] [ 113.883638] WARNING: CPU: 0 PID: 3850 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 113.884369] Modules linked in: [ 113.884621] CPU: 0 PID: 3850 Comm: syz-executor.4 Not tainted 6.0.0-rc5-next-20220912 #1 [ 113.885247] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 113.886108] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 113.886504] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 113.887777] RSP: 0018:ffff88801a507c48 EFLAGS: 00010006 [ 113.888153] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 113.888656] RDX: ffff888038a75040 RSI: ffffffff81566027 RDI: 0000000000000005 [ 113.889158] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 113.889662] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff88800f235400 [ 113.890161] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 113.890656] FS: 00007fa35fc3d700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 113.891218] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.891625] CR2: 00007f3c06d296f4 CR3: 000000001744a000 CR4: 0000000000350ef0 [ 113.892133] Call Trace: [ 113.892325] [ 113.892491] ctx_sched_out+0x8f1/0xc10 [ 113.892783] __perf_event_task_sched_out+0x6d0/0x18d0 [ 113.893159] ? lock_is_held_type+0xd7/0x130 [ 113.893499] ? __perf_cgroup_move+0x160/0x160 [ 113.893833] ? set_next_entity+0x304/0x550 [ 113.894175] ? update_curr+0x267/0x740 [ 113.894480] ? lock_is_held_type+0xd7/0x130 [ 113.894810] __schedule+0xedd/0x2470 [ 113.895089] ? io_schedule_timeout+0x150/0x150 [ 113.895442] ? trace_rcu_dyntick+0x1a7/0x250 [ 113.895799] schedule+0xda/0x1b0 [ 113.896063] exit_to_user_mode_prepare+0x114/0x1a0 [ 113.896451] syscall_exit_to_user_mode+0x19/0x40 [ 113.896814] do_syscall_64+0x48/0x90 [ 113.897104] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 113.897510] RIP: 0033:0x7fa3626c7b19 [ 113.897796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 113.899139] RSP: 002b:00007fa35fc3d218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 113.899724] RAX: 0000000000000001 RBX: 00007fa3627daf68 RCX: 00007fa3626c7b19 [ 113.900263] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa3627daf6c [ 113.900798] RBP: 00007fa3627daf60 R08: 000000000000000e R09: 0000000000000000 [ 113.901351] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fa3627daf6c [ 113.901887] R13: 00007ffd41b9644f R14: 00007fa35fc3d300 R15: 0000000000022000 [ 113.902441] [ 113.902625] irq event stamp: 1952 [ 113.902881] hardirqs last enabled at (1951): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 113.903634] hardirqs last disabled at (1952): [] __schedule+0x1225/0x2470 [ 113.904260] softirqs last enabled at (1674): [] __irq_exit_rcu+0x11b/0x180 [ 113.904924] softirqs last disabled at (1627): [] __irq_exit_rcu+0x11b/0x180 [ 113.905596] ---[ end trace 0000000000000000 ]--- [ 114.514070] hrtimer: interrupt took 16170 ns 13:02:45 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x500, 0x0, 0x1, 0xb}, 0x20) 13:02:45 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x500, 0x0, 0x1, 0xb}, 0x20) 13:02:45 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x10000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1) io_setup(0x9, &(0x7f0000000040)=0x0) io_cancel(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0xa, 0xffffffffffffffff, &(0x7f0000000180)="c708121d493f59aaba42597d2967d020e650c36393335178ac8b39102cd2c9140de8af68972a597a1932c702a4d94c4da657b46bf0c8365e1badd6caca3d57380c7d15b39441f5b78bd8373291b5a411d3dec121ddff45957d2376ba3745eebc09eefc0c47a10d9bebc41ef277cf85da69f66277ac480d566e9012eb9d6ba91ff47c3a6cded1cfa66994b4ba40725e75b441fe7c16944ab7baa495e87a34577bb857311de40eaab3d9a27d5116379522ce1a03d06adeb878f8de063f0338f144f7ede98f127240dabc6656351abb4f1050624ac4935632cffc8cbaf81cfe36c572c8d0cbaa20907dba0c899e63a6eb3668986f30a668", 0xf6, 0x1000, 0x0, 0x4, r1}, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r4, &(0x7f00000005c0)='\x00', 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000100, 0x3}, 0x15182, 0x7, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, 0x5, r4, 0x8) write(r3, &(0x7f0000000380)="1c1016382f3e5e84315640b24787dc5a68b49bc9293d06aa522079431663e28e2e3c9a44c598a7b7881d96d8bd966b049e6c111bd94692c67e3fb5a4cf84d89cfd935d6becdd725292a25a5cde46f2be588d3bd7fa38d861fb707777a92d917b8ef37e850790a888da4ac85f83bee96c5c263cc6de0eb37c12cefd91c1c79e60657560b8839a14a84c1511db42fed316750610940be3", 0x96) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) 13:02:45 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x500, 0x0, 0x1, 0xb}, 0x20) 13:02:46 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x10000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1) io_setup(0x9, &(0x7f0000000040)=0x0) io_cancel(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0xa, 0xffffffffffffffff, &(0x7f0000000180)="c708121d493f59aaba42597d2967d020e650c36393335178ac8b39102cd2c9140de8af68972a597a1932c702a4d94c4da657b46bf0c8365e1badd6caca3d57380c7d15b39441f5b78bd8373291b5a411d3dec121ddff45957d2376ba3745eebc09eefc0c47a10d9bebc41ef277cf85da69f66277ac480d566e9012eb9d6ba91ff47c3a6cded1cfa66994b4ba40725e75b441fe7c16944ab7baa495e87a34577bb857311de40eaab3d9a27d5116379522ce1a03d06adeb878f8de063f0338f144f7ede98f127240dabc6656351abb4f1050624ac4935632cffc8cbaf81cfe36c572c8d0cbaa20907dba0c899e63a6eb3668986f30a668", 0xf6, 0x1000, 0x0, 0x4, r1}, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r4, &(0x7f00000005c0)='\x00', 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000100, 0x3}, 0x15182, 0x7, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, 0x5, r4, 0x8) write(r3, &(0x7f0000000380)="1c1016382f3e5e84315640b24787dc5a68b49bc9293d06aa522079431663e28e2e3c9a44c598a7b7881d96d8bd966b049e6c111bd94692c67e3fb5a4cf84d89cfd935d6becdd725292a25a5cde46f2be588d3bd7fa38d861fb707777a92d917b8ef37e850790a888da4ac85f83bee96c5c263cc6de0eb37c12cefd91c1c79e60657560b8839a14a84c1511db42fed316750610940be3", 0x96) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) [ 115.264844] loop3: detected capacity change from 0 to 4 [ 115.307447] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 115.308457] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (2 blocks) [ 115.324505] loop3: detected capacity change from 0 to 4 [ 115.334407] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 115.335416] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (2 blocks) 13:02:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012900)) [ 115.482566] loop3: detected capacity change from 0 to 4 [ 115.500774] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 115.501498] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (2 blocks) [ 115.561771] audit: type=1326 audit(1662987766.663:9): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3947 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36f6cefb19 code=0x0 13:02:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012900)) [ 115.699743] loop3: detected capacity change from 0 to 4 [ 115.711801] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 115.712607] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (2 blocks) 13:02:46 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0xfe2c, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 115.832635] syz-executor.4 (3915) used greatest stack depth: 24536 bytes left [ 115.917789] mmap: syz-executor.5 (3967) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 116.024742] syz-executor.6 (3924) used greatest stack depth: 23448 bytes left [ 116.408119] audit: type=1326 audit(1662987767.509:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3947 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36f6cefb19 code=0x0 13:02:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012900)) 13:02:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1340b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) 13:02:47 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x10000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1) io_setup(0x9, &(0x7f0000000040)=0x0) io_cancel(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0xa, 0xffffffffffffffff, &(0x7f0000000180)="c708121d493f59aaba42597d2967d020e650c36393335178ac8b39102cd2c9140de8af68972a597a1932c702a4d94c4da657b46bf0c8365e1badd6caca3d57380c7d15b39441f5b78bd8373291b5a411d3dec121ddff45957d2376ba3745eebc09eefc0c47a10d9bebc41ef277cf85da69f66277ac480d566e9012eb9d6ba91ff47c3a6cded1cfa66994b4ba40725e75b441fe7c16944ab7baa495e87a34577bb857311de40eaab3d9a27d5116379522ce1a03d06adeb878f8de063f0338f144f7ede98f127240dabc6656351abb4f1050624ac4935632cffc8cbaf81cfe36c572c8d0cbaa20907dba0c899e63a6eb3668986f30a668", 0xf6, 0x1000, 0x0, 0x4, r1}, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r4, &(0x7f00000005c0)='\x00', 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000100, 0x3}, 0x15182, 0x7, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, 0x5, r4, 0x8) write(r3, &(0x7f0000000380)="1c1016382f3e5e84315640b24787dc5a68b49bc9293d06aa522079431663e28e2e3c9a44c598a7b7881d96d8bd966b049e6c111bd94692c67e3fb5a4cf84d89cfd935d6becdd725292a25a5cde46f2be588d3bd7fa38d861fb707777a92d917b8ef37e850790a888da4ac85f83bee96c5c263cc6de0eb37c12cefd91c1c79e60657560b8839a14a84c1511db42fed316750610940be3", 0x96) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) 13:02:47 executing program 5: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x80000001, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x6, 0x1000, 0x1) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0), 0x7, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x6559, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x0, 0xffffffffffffff26, 0x4) get_mempolicy(0x0, &(0x7f0000000280), 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x5) remap_file_pages(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x0, 0x8d, 0x40000) 13:02:47 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0xfe2c, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:02:47 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x10000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1) io_setup(0x9, &(0x7f0000000040)=0x0) io_cancel(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0xa, 0xffffffffffffffff, &(0x7f0000000180)="c708121d493f59aaba42597d2967d020e650c36393335178ac8b39102cd2c9140de8af68972a597a1932c702a4d94c4da657b46bf0c8365e1badd6caca3d57380c7d15b39441f5b78bd8373291b5a411d3dec121ddff45957d2376ba3745eebc09eefc0c47a10d9bebc41ef277cf85da69f66277ac480d566e9012eb9d6ba91ff47c3a6cded1cfa66994b4ba40725e75b441fe7c16944ab7baa495e87a34577bb857311de40eaab3d9a27d5116379522ce1a03d06adeb878f8de063f0338f144f7ede98f127240dabc6656351abb4f1050624ac4935632cffc8cbaf81cfe36c572c8d0cbaa20907dba0c899e63a6eb3668986f30a668", 0xf6, 0x1000, 0x0, 0x4, r1}, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r4, &(0x7f00000005c0)='\x00', 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000100, 0x3}, 0x15182, 0x7, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, 0x5, r4, 0x8) write(r3, &(0x7f0000000380)="1c1016382f3e5e84315640b24787dc5a68b49bc9293d06aa522079431663e28e2e3c9a44c598a7b7881d96d8bd966b049e6c111bd94692c67e3fb5a4cf84d89cfd935d6becdd725292a25a5cde46f2be588d3bd7fa38d861fb707777a92d917b8ef37e850790a888da4ac85f83bee96c5c263cc6de0eb37c12cefd91c1c79e60657560b8839a14a84c1511db42fed316750610940be3", 0x96) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) 13:02:47 executing program 7: ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x40042409, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) clone3(&(0x7f0000000700)={0x4000, 0x0, &(0x7f0000000400), &(0x7f0000000440), {}, &(0x7f0000000480)=""/207, 0xcf, 0x0, &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x3}, 0x58) 13:02:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000140)=@req={0x28, &(0x7f0000000100)={'wg0\x00', @ifru_hwaddr=@random}}) [ 116.610503] loop3: detected capacity change from 0 to 4 [ 116.621357] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 116.622408] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (2 blocks) [ 116.652834] audit: type=1326 audit(1662987767.753:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3994 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36f6cefb19 code=0x0 13:02:47 executing program 5: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x80000001, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x6, 0x1000, 0x1) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0), 0x7, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x6559, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x0, 0xffffffffffffff26, 0x4) get_mempolicy(0x0, &(0x7f0000000280), 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x5) remap_file_pages(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x0, 0x8d, 0x40000) 13:02:47 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0xfe2c, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:02:48 executing program 7: ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x40042409, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) clone3(&(0x7f0000000700)={0x4000, 0x0, &(0x7f0000000400), &(0x7f0000000440), {}, &(0x7f0000000480)=""/207, 0xcf, 0x0, &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x3}, 0x58) 13:02:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000140)=@req={0x28, &(0x7f0000000100)={'wg0\x00', @ifru_hwaddr=@random}}) 13:02:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1340b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) 13:02:48 executing program 5: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x80000001, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x6, 0x1000, 0x1) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0), 0x7, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x6559, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x0, 0xffffffffffffff26, 0x4) get_mempolicy(0x0, &(0x7f0000000280), 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x5) remap_file_pages(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x0, 0x8d, 0x40000) 13:02:48 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x10000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1) io_setup(0x9, &(0x7f0000000040)=0x0) io_cancel(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0xa, 0xffffffffffffffff, &(0x7f0000000180)="c708121d493f59aaba42597d2967d020e650c36393335178ac8b39102cd2c9140de8af68972a597a1932c702a4d94c4da657b46bf0c8365e1badd6caca3d57380c7d15b39441f5b78bd8373291b5a411d3dec121ddff45957d2376ba3745eebc09eefc0c47a10d9bebc41ef277cf85da69f66277ac480d566e9012eb9d6ba91ff47c3a6cded1cfa66994b4ba40725e75b441fe7c16944ab7baa495e87a34577bb857311de40eaab3d9a27d5116379522ce1a03d06adeb878f8de063f0338f144f7ede98f127240dabc6656351abb4f1050624ac4935632cffc8cbaf81cfe36c572c8d0cbaa20907dba0c899e63a6eb3668986f30a668", 0xf6, 0x1000, 0x0, 0x4, r1}, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r4, &(0x7f00000005c0)='\x00', 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000100, 0x3}, 0x15182, 0x7, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, 0x5, r4, 0x8) write(r3, &(0x7f0000000380)="1c1016382f3e5e84315640b24787dc5a68b49bc9293d06aa522079431663e28e2e3c9a44c598a7b7881d96d8bd966b049e6c111bd94692c67e3fb5a4cf84d89cfd935d6becdd725292a25a5cde46f2be588d3bd7fa38d861fb707777a92d917b8ef37e850790a888da4ac85f83bee96c5c263cc6de0eb37c12cefd91c1c79e60657560b8839a14a84c1511db42fed316750610940be3", 0x96) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) 13:02:48 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x10000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1) io_setup(0x9, &(0x7f0000000040)=0x0) io_cancel(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0xa, 0xffffffffffffffff, &(0x7f0000000180)="c708121d493f59aaba42597d2967d020e650c36393335178ac8b39102cd2c9140de8af68972a597a1932c702a4d94c4da657b46bf0c8365e1badd6caca3d57380c7d15b39441f5b78bd8373291b5a411d3dec121ddff45957d2376ba3745eebc09eefc0c47a10d9bebc41ef277cf85da69f66277ac480d566e9012eb9d6ba91ff47c3a6cded1cfa66994b4ba40725e75b441fe7c16944ab7baa495e87a34577bb857311de40eaab3d9a27d5116379522ce1a03d06adeb878f8de063f0338f144f7ede98f127240dabc6656351abb4f1050624ac4935632cffc8cbaf81cfe36c572c8d0cbaa20907dba0c899e63a6eb3668986f30a668", 0xf6, 0x1000, 0x0, 0x4, r1}, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r4, &(0x7f00000005c0)='\x00', 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000100, 0x3}, 0x15182, 0x7, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, 0x5, r4, 0x8) write(r3, &(0x7f0000000380)="1c1016382f3e5e84315640b24787dc5a68b49bc9293d06aa522079431663e28e2e3c9a44c598a7b7881d96d8bd966b049e6c111bd94692c67e3fb5a4cf84d89cfd935d6becdd725292a25a5cde46f2be588d3bd7fa38d861fb707777a92d917b8ef37e850790a888da4ac85f83bee96c5c263cc6de0eb37c12cefd91c1c79e60657560b8839a14a84c1511db42fed316750610940be3", 0x96) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) 13:02:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000140)=@req={0x28, &(0x7f0000000100)={'wg0\x00', @ifru_hwaddr=@random}}) [ 117.570961] audit: type=1326 audit(1662987768.672:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4005 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36f6cefb19 code=0x0 13:02:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000140)=@req={0x28, &(0x7f0000000100)={'wg0\x00', @ifru_hwaddr=@random}}) [ 118.851045] syz-executor.6 (4016) used greatest stack depth: 23384 bytes left 13:02:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000140)=@req={0x28, &(0x7f0000000100)={'wg0\x00', @ifru_hwaddr=@random}}) 13:02:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1340b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) 13:02:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1340b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) 13:02:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1340b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) 13:02:49 executing program 7: ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x40042409, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) clone3(&(0x7f0000000700)={0x4000, 0x0, &(0x7f0000000400), &(0x7f0000000440), {}, &(0x7f0000000480)=""/207, 0xcf, 0x0, &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x3}, 0x58) [ 118.900772] audit: type=1326 audit(1662987770.002:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4026 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36f6cefb19 code=0x0 [ 118.911498] audit: type=1326 audit(1662987770.013:14): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4028 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3777582b19 code=0x0 13:02:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1340b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) [ 118.923135] audit: type=1326 audit(1662987770.018:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4029 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2abdd89b19 code=0x0 [ 118.936307] audit: type=1326 audit(1662987770.029:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4022 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf3bf05b19 code=0x0 13:02:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000140)=@req={0x28, &(0x7f0000000100)={'wg0\x00', @ifru_hwaddr=@random}}) 13:02:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1340b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) [ 119.060334] audit: type=1326 audit(1662987770.161:17): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4042 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3626c7b19 code=0x0 13:02:50 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1340b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) [ 119.132847] audit: type=1326 audit(1662987770.234:18): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4044 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb05b8b5b19 code=0x0 13:02:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1340b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) [ 119.179674] audit: type=1326 audit(1662987770.281:19): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4047 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff92984b19 code=0x0 13:02:50 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1340b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) [ 119.212922] audit: type=1326 audit(1662987770.314:20): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4049 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd03a8bb19 code=0x0 13:02:50 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1340b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) 13:02:50 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1340b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) [ 119.860844] audit: type=1326 audit(1662987770.962:21): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4054 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf3bf05b19 code=0x0 [ 119.881913] audit: type=1326 audit(1662987770.983:22): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4056 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3777582b19 code=0x0 13:02:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1340b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) 13:02:51 executing program 1: ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x40042409, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) clone3(&(0x7f0000000700)={0x4000, 0x0, &(0x7f0000000400), &(0x7f0000000440), {}, &(0x7f0000000480)=""/207, 0xcf, 0x0, &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x3}, 0x58) 13:02:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1340b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) 13:02:51 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1340b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) 13:02:51 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1340b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) 13:02:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1340b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) 13:02:52 executing program 1: ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x40042409, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) clone3(&(0x7f0000000700)={0x4000, 0x0, &(0x7f0000000400), &(0x7f0000000440), {}, &(0x7f0000000480)=""/207, 0xcf, 0x0, &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x3}, 0x58) 13:02:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1340b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) 13:02:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1340b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) 13:02:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1340b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) 13:02:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1340b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) 13:02:52 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1340b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) 13:02:52 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1340b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) 13:02:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1340b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) 13:02:52 executing program 1: ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x40042409, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) clone3(&(0x7f0000000700)={0x4000, 0x0, &(0x7f0000000400), &(0x7f0000000440), {}, &(0x7f0000000480)=""/207, 0xcf, 0x0, &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x3}, 0x58) 13:02:52 executing program 1: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x80000001, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x6, 0x1000, 0x1) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0), 0x7, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x6559, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x0, 0xffffffffffffff26, 0x4) get_mempolicy(0x0, &(0x7f0000000280), 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x5) remap_file_pages(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x0, 0x8d, 0x40000) 13:02:52 executing program 1: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x80000001, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x6, 0x1000, 0x1) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0), 0x7, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x6559, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x0, 0xffffffffffffff26, 0x4) get_mempolicy(0x0, &(0x7f0000000280), 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x5) remap_file_pages(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x0, 0x8d, 0x40000) 13:02:52 executing program 1: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x80000001, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x6, 0x1000, 0x1) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0), 0x7, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x6559, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x0, 0xffffffffffffff26, 0x4) get_mempolicy(0x0, &(0x7f0000000280), 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x5) remap_file_pages(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x0, 0x8d, 0x40000) 13:02:53 executing program 7: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x80000001, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x6, 0x1000, 0x1) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0), 0x7, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x6559, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x0, 0xffffffffffffff26, 0x4) get_mempolicy(0x0, &(0x7f0000000280), 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x5) remap_file_pages(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x0, 0x8d, 0x40000) 13:02:53 executing program 0: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x80000001, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x6, 0x1000, 0x1) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0), 0x7, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x6559, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x0, 0xffffffffffffff26, 0x4) get_mempolicy(0x0, &(0x7f0000000280), 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x5) remap_file_pages(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x0, 0x8d, 0x40000) 13:02:53 executing program 3: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x80000001, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x6, 0x1000, 0x1) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0), 0x7, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x6559, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x0, 0xffffffffffffff26, 0x4) get_mempolicy(0x0, &(0x7f0000000280), 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x5) remap_file_pages(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x0, 0x8d, 0x40000) 13:02:53 executing program 2: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x80000001, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x6, 0x1000, 0x1) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0), 0x7, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x6559, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x0, 0xffffffffffffff26, 0x4) get_mempolicy(0x0, &(0x7f0000000280), 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x5) remap_file_pages(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x0, 0x8d, 0x40000) 13:02:53 executing program 4: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x80000001, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x6, 0x1000, 0x1) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0), 0x7, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x6559, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x0, 0xffffffffffffff26, 0x4) get_mempolicy(0x0, &(0x7f0000000280), 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x5) remap_file_pages(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x0, 0x8d, 0x40000) 13:02:53 executing program 5: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x80000001, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x6, 0x1000, 0x1) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0), 0x7, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x6559, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x0, 0xffffffffffffff26, 0x4) get_mempolicy(0x0, &(0x7f0000000280), 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x5) remap_file_pages(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x0, 0x8d, 0x40000) 13:02:53 executing program 6: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x80000001, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x6, 0x1000, 0x1) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0), 0x7, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x6559, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x0, 0xffffffffffffff26, 0x4) get_mempolicy(0x0, &(0x7f0000000280), 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x5) remap_file_pages(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x0, 0x8d, 0x40000) 13:02:53 executing program 1: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x80000001, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x6, 0x1000, 0x1) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0), 0x7, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x6559, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x0, 0xffffffffffffff26, 0x4) get_mempolicy(0x0, &(0x7f0000000280), 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x5) remap_file_pages(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x0, 0x8d, 0x40000) 13:02:53 executing program 4: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x80000001, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x6, 0x1000, 0x1) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0), 0x7, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x6559, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x0, 0xffffffffffffff26, 0x4) get_mempolicy(0x0, &(0x7f0000000280), 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x5) remap_file_pages(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x0, 0x8d, 0x40000) 13:02:53 executing program 2: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x80000001, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x6, 0x1000, 0x1) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0), 0x7, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x6559, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x0, 0xffffffffffffff26, 0x4) get_mempolicy(0x0, &(0x7f0000000280), 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x5) remap_file_pages(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x0, 0x8d, 0x40000) 13:02:53 executing program 1: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x80000001, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x6, 0x1000, 0x1) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0), 0x7, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x6559, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x0, 0xffffffffffffff26, 0x4) get_mempolicy(0x0, &(0x7f0000000280), 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x5) remap_file_pages(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x0, 0x8d, 0x40000) 13:02:53 executing program 5: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x80000001, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x6, 0x1000, 0x1) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0), 0x7, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x6559, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x0, 0xffffffffffffff26, 0x4) get_mempolicy(0x0, &(0x7f0000000280), 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x5) remap_file_pages(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x0, 0x8d, 0x40000) 13:02:53 executing program 0: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x80000001, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x6, 0x1000, 0x1) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0), 0x7, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x6559, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x0, 0xffffffffffffff26, 0x4) get_mempolicy(0x0, &(0x7f0000000280), 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x5) remap_file_pages(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x0, 0x8d, 0x40000) 13:02:53 executing program 7: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x80000001, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x6, 0x1000, 0x1) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0), 0x7, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x6559, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x0, 0xffffffffffffff26, 0x4) get_mempolicy(0x0, &(0x7f0000000280), 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x5) remap_file_pages(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x0, 0x8d, 0x40000) 13:02:53 executing program 3: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x80000001, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x6, 0x1000, 0x1) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0), 0x7, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x6559, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x0, 0xffffffffffffff26, 0x4) get_mempolicy(0x0, &(0x7f0000000280), 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x5) remap_file_pages(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x0, 0x8d, 0x40000) 13:02:53 executing program 2: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x80000001, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x6, 0x1000, 0x1) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0), 0x7, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x6559, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x0, 0xffffffffffffff26, 0x4) get_mempolicy(0x0, &(0x7f0000000280), 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x5) remap_file_pages(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x0, 0x8d, 0x40000) 13:02:53 executing program 6: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x80000001, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x6, 0x1000, 0x1) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0), 0x7, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x6559, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x0, 0xffffffffffffff26, 0x4) get_mempolicy(0x0, &(0x7f0000000280), 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x5) remap_file_pages(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x0, 0x8d, 0x40000) 13:02:53 executing program 4: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x80000001, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x6, 0x1000, 0x1) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0), 0x7, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x6559, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x0, 0xffffffffffffff26, 0x4) get_mempolicy(0x0, &(0x7f0000000280), 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x5) remap_file_pages(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x0, 0x8d, 0x40000) 13:02:53 executing program 0: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x80000001, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x6, 0x1000, 0x1) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0), 0x7, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x6559, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x0, 0xffffffffffffff26, 0x4) get_mempolicy(0x0, &(0x7f0000000280), 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x5) remap_file_pages(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x0, 0x8d, 0x40000) 13:02:53 executing program 1: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x80000001, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x6, 0x1000, 0x1) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0), 0x7, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x6559, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x0, 0xffffffffffffff26, 0x4) get_mempolicy(0x0, &(0x7f0000000280), 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x5) remap_file_pages(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x0, 0x8d, 0x40000) 13:02:53 executing program 5: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x80000001, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x6, 0x1000, 0x1) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0), 0x7, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x6559, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x0, 0xffffffffffffff26, 0x4) get_mempolicy(0x0, &(0x7f0000000280), 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x5) remap_file_pages(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x0, 0x8d, 0x40000) 13:02:53 executing program 6: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x80000001, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x6, 0x1000, 0x1) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0), 0x7, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x6559, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x0, 0xffffffffffffff26, 0x4) get_mempolicy(0x0, &(0x7f0000000280), 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x5) remap_file_pages(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x0, 0x8d, 0x40000) 13:02:53 executing program 7: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x80000001, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x6, 0x1000, 0x1) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0), 0x7, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x6559, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x0, 0xffffffffffffff26, 0x4) get_mempolicy(0x0, &(0x7f0000000280), 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x5) remap_file_pages(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x0, 0x8d, 0x40000) 13:02:53 executing program 4: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x80000001, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x6, 0x1000, 0x1) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0), 0x7, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x6559, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x0, 0xffffffffffffff26, 0x4) get_mempolicy(0x0, &(0x7f0000000280), 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x5) remap_file_pages(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x0, 0x8d, 0x40000) 13:02:53 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0xfe2c, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:02:53 executing program 3: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x80000001, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x6, 0x1000, 0x1) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0), 0x7, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x6559, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x0, 0xffffffffffffff26, 0x4) get_mempolicy(0x0, &(0x7f0000000280), 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x5) remap_file_pages(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x0, 0x8d, 0x40000) 13:02:53 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0xfe2c, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:02:53 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0xfe2c, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:02:53 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0xfe2c, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:02:53 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0xfe2c, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:02:53 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x10000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1) io_setup(0x9, &(0x7f0000000040)=0x0) io_cancel(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0xa, 0xffffffffffffffff, &(0x7f0000000180)="c708121d493f59aaba42597d2967d020e650c36393335178ac8b39102cd2c9140de8af68972a597a1932c702a4d94c4da657b46bf0c8365e1badd6caca3d57380c7d15b39441f5b78bd8373291b5a411d3dec121ddff45957d2376ba3745eebc09eefc0c47a10d9bebc41ef277cf85da69f66277ac480d566e9012eb9d6ba91ff47c3a6cded1cfa66994b4ba40725e75b441fe7c16944ab7baa495e87a34577bb857311de40eaab3d9a27d5116379522ce1a03d06adeb878f8de063f0338f144f7ede98f127240dabc6656351abb4f1050624ac4935632cffc8cbaf81cfe36c572c8d0cbaa20907dba0c899e63a6eb3668986f30a668", 0xf6, 0x1000, 0x0, 0x4, r1}, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r4, &(0x7f00000005c0)='\x00', 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000100, 0x3}, 0x15182, 0x7, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, 0x5, r4, 0x8) write(r3, &(0x7f0000000380)="1c1016382f3e5e84315640b24787dc5a68b49bc9293d06aa522079431663e28e2e3c9a44c598a7b7881d96d8bd966b049e6c111bd94692c67e3fb5a4cf84d89cfd935d6becdd725292a25a5cde46f2be588d3bd7fa38d861fb707777a92d917b8ef37e850790a888da4ac85f83bee96c5c263cc6de0eb37c12cefd91c1c79e60657560b8839a14a84c1511db42fed316750610940be3", 0x96) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) 13:02:53 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0xfe2c, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:02:53 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0xfe2c, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:02:53 executing program 4: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x80000001, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x6, 0x1000, 0x1) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0), 0x7, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x6559, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x0, 0xffffffffffffff26, 0x4) get_mempolicy(0x0, &(0x7f0000000280), 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x5) remap_file_pages(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x0, 0x8d, 0x40000) 13:02:53 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0xfe2c, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:02:53 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x10000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1) io_setup(0x9, &(0x7f0000000040)=0x0) io_cancel(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0xa, 0xffffffffffffffff, &(0x7f0000000180)="c708121d493f59aaba42597d2967d020e650c36393335178ac8b39102cd2c9140de8af68972a597a1932c702a4d94c4da657b46bf0c8365e1badd6caca3d57380c7d15b39441f5b78bd8373291b5a411d3dec121ddff45957d2376ba3745eebc09eefc0c47a10d9bebc41ef277cf85da69f66277ac480d566e9012eb9d6ba91ff47c3a6cded1cfa66994b4ba40725e75b441fe7c16944ab7baa495e87a34577bb857311de40eaab3d9a27d5116379522ce1a03d06adeb878f8de063f0338f144f7ede98f127240dabc6656351abb4f1050624ac4935632cffc8cbaf81cfe36c572c8d0cbaa20907dba0c899e63a6eb3668986f30a668", 0xf6, 0x1000, 0x0, 0x4, r1}, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r4, &(0x7f00000005c0)='\x00', 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000100, 0x3}, 0x15182, 0x7, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, 0x5, r4, 0x8) write(r3, &(0x7f0000000380)="1c1016382f3e5e84315640b24787dc5a68b49bc9293d06aa522079431663e28e2e3c9a44c598a7b7881d96d8bd966b049e6c111bd94692c67e3fb5a4cf84d89cfd935d6becdd725292a25a5cde46f2be588d3bd7fa38d861fb707777a92d917b8ef37e850790a888da4ac85f83bee96c5c263cc6de0eb37c12cefd91c1c79e60657560b8839a14a84c1511db42fed316750610940be3", 0x96) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) 13:02:53 executing program 3: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x10000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1) io_setup(0x9, &(0x7f0000000040)=0x0) io_cancel(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0xa, 0xffffffffffffffff, &(0x7f0000000180)="c708121d493f59aaba42597d2967d020e650c36393335178ac8b39102cd2c9140de8af68972a597a1932c702a4d94c4da657b46bf0c8365e1badd6caca3d57380c7d15b39441f5b78bd8373291b5a411d3dec121ddff45957d2376ba3745eebc09eefc0c47a10d9bebc41ef277cf85da69f66277ac480d566e9012eb9d6ba91ff47c3a6cded1cfa66994b4ba40725e75b441fe7c16944ab7baa495e87a34577bb857311de40eaab3d9a27d5116379522ce1a03d06adeb878f8de063f0338f144f7ede98f127240dabc6656351abb4f1050624ac4935632cffc8cbaf81cfe36c572c8d0cbaa20907dba0c899e63a6eb3668986f30a668", 0xf6, 0x1000, 0x0, 0x4, r1}, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r4, &(0x7f00000005c0)='\x00', 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000100, 0x3}, 0x15182, 0x7, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, 0x5, r4, 0x8) write(r3, &(0x7f0000000380)="1c1016382f3e5e84315640b24787dc5a68b49bc9293d06aa522079431663e28e2e3c9a44c598a7b7881d96d8bd966b049e6c111bd94692c67e3fb5a4cf84d89cfd935d6becdd725292a25a5cde46f2be588d3bd7fa38d861fb707777a92d917b8ef37e850790a888da4ac85f83bee96c5c263cc6de0eb37c12cefd91c1c79e60657560b8839a14a84c1511db42fed316750610940be3", 0x96) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) 13:02:53 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0xfe2c, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:02:53 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0xfe2c, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:02:53 executing program 4: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x80000001, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x6, 0x1000, 0x1) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0), 0x7, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x6559, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x0, 0xffffffffffffff26, 0x4) get_mempolicy(0x0, &(0x7f0000000280), 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x5) remap_file_pages(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x0, 0x8d, 0x40000) 13:02:54 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0xfe2c, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:02:54 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0xfe2c, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:02:54 executing program 2: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x10000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1) io_setup(0x9, &(0x7f0000000040)=0x0) io_cancel(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0xa, 0xffffffffffffffff, &(0x7f0000000180)="c708121d493f59aaba42597d2967d020e650c36393335178ac8b39102cd2c9140de8af68972a597a1932c702a4d94c4da657b46bf0c8365e1badd6caca3d57380c7d15b39441f5b78bd8373291b5a411d3dec121ddff45957d2376ba3745eebc09eefc0c47a10d9bebc41ef277cf85da69f66277ac480d566e9012eb9d6ba91ff47c3a6cded1cfa66994b4ba40725e75b441fe7c16944ab7baa495e87a34577bb857311de40eaab3d9a27d5116379522ce1a03d06adeb878f8de063f0338f144f7ede98f127240dabc6656351abb4f1050624ac4935632cffc8cbaf81cfe36c572c8d0cbaa20907dba0c899e63a6eb3668986f30a668", 0xf6, 0x1000, 0x0, 0x4, r1}, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r4, &(0x7f00000005c0)='\x00', 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000100, 0x3}, 0x15182, 0x7, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, 0x5, r4, 0x8) write(r3, &(0x7f0000000380)="1c1016382f3e5e84315640b24787dc5a68b49bc9293d06aa522079431663e28e2e3c9a44c598a7b7881d96d8bd966b049e6c111bd94692c67e3fb5a4cf84d89cfd935d6becdd725292a25a5cde46f2be588d3bd7fa38d861fb707777a92d917b8ef37e850790a888da4ac85f83bee96c5c263cc6de0eb37c12cefd91c1c79e60657560b8839a14a84c1511db42fed316750610940be3", 0x96) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) 13:02:54 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x10000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1) io_setup(0x9, &(0x7f0000000040)=0x0) io_cancel(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0xa, 0xffffffffffffffff, &(0x7f0000000180)="c708121d493f59aaba42597d2967d020e650c36393335178ac8b39102cd2c9140de8af68972a597a1932c702a4d94c4da657b46bf0c8365e1badd6caca3d57380c7d15b39441f5b78bd8373291b5a411d3dec121ddff45957d2376ba3745eebc09eefc0c47a10d9bebc41ef277cf85da69f66277ac480d566e9012eb9d6ba91ff47c3a6cded1cfa66994b4ba40725e75b441fe7c16944ab7baa495e87a34577bb857311de40eaab3d9a27d5116379522ce1a03d06adeb878f8de063f0338f144f7ede98f127240dabc6656351abb4f1050624ac4935632cffc8cbaf81cfe36c572c8d0cbaa20907dba0c899e63a6eb3668986f30a668", 0xf6, 0x1000, 0x0, 0x4, r1}, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r4, &(0x7f00000005c0)='\x00', 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000100, 0x3}, 0x15182, 0x7, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, 0x5, r4, 0x8) write(r3, &(0x7f0000000380)="1c1016382f3e5e84315640b24787dc5a68b49bc9293d06aa522079431663e28e2e3c9a44c598a7b7881d96d8bd966b049e6c111bd94692c67e3fb5a4cf84d89cfd935d6becdd725292a25a5cde46f2be588d3bd7fa38d861fb707777a92d917b8ef37e850790a888da4ac85f83bee96c5c263cc6de0eb37c12cefd91c1c79e60657560b8839a14a84c1511db42fed316750610940be3", 0x96) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) 13:02:54 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x10000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1) io_setup(0x9, &(0x7f0000000040)=0x0) io_cancel(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0xa, 0xffffffffffffffff, &(0x7f0000000180)="c708121d493f59aaba42597d2967d020e650c36393335178ac8b39102cd2c9140de8af68972a597a1932c702a4d94c4da657b46bf0c8365e1badd6caca3d57380c7d15b39441f5b78bd8373291b5a411d3dec121ddff45957d2376ba3745eebc09eefc0c47a10d9bebc41ef277cf85da69f66277ac480d566e9012eb9d6ba91ff47c3a6cded1cfa66994b4ba40725e75b441fe7c16944ab7baa495e87a34577bb857311de40eaab3d9a27d5116379522ce1a03d06adeb878f8de063f0338f144f7ede98f127240dabc6656351abb4f1050624ac4935632cffc8cbaf81cfe36c572c8d0cbaa20907dba0c899e63a6eb3668986f30a668", 0xf6, 0x1000, 0x0, 0x4, r1}, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r4, &(0x7f00000005c0)='\x00', 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000100, 0x3}, 0x15182, 0x7, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, 0x5, r4, 0x8) write(r3, &(0x7f0000000380)="1c1016382f3e5e84315640b24787dc5a68b49bc9293d06aa522079431663e28e2e3c9a44c598a7b7881d96d8bd966b049e6c111bd94692c67e3fb5a4cf84d89cfd935d6becdd725292a25a5cde46f2be588d3bd7fa38d861fb707777a92d917b8ef37e850790a888da4ac85f83bee96c5c263cc6de0eb37c12cefd91c1c79e60657560b8839a14a84c1511db42fed316750610940be3", 0x96) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) 13:02:54 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x10000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1) io_setup(0x9, &(0x7f0000000040)=0x0) io_cancel(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0xa, 0xffffffffffffffff, &(0x7f0000000180)="c708121d493f59aaba42597d2967d020e650c36393335178ac8b39102cd2c9140de8af68972a597a1932c702a4d94c4da657b46bf0c8365e1badd6caca3d57380c7d15b39441f5b78bd8373291b5a411d3dec121ddff45957d2376ba3745eebc09eefc0c47a10d9bebc41ef277cf85da69f66277ac480d566e9012eb9d6ba91ff47c3a6cded1cfa66994b4ba40725e75b441fe7c16944ab7baa495e87a34577bb857311de40eaab3d9a27d5116379522ce1a03d06adeb878f8de063f0338f144f7ede98f127240dabc6656351abb4f1050624ac4935632cffc8cbaf81cfe36c572c8d0cbaa20907dba0c899e63a6eb3668986f30a668", 0xf6, 0x1000, 0x0, 0x4, r1}, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r4, &(0x7f00000005c0)='\x00', 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000100, 0x3}, 0x15182, 0x7, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, 0x5, r4, 0x8) write(r3, &(0x7f0000000380)="1c1016382f3e5e84315640b24787dc5a68b49bc9293d06aa522079431663e28e2e3c9a44c598a7b7881d96d8bd966b049e6c111bd94692c67e3fb5a4cf84d89cfd935d6becdd725292a25a5cde46f2be588d3bd7fa38d861fb707777a92d917b8ef37e850790a888da4ac85f83bee96c5c263cc6de0eb37c12cefd91c1c79e60657560b8839a14a84c1511db42fed316750610940be3", 0x96) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) 13:02:54 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x10000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1) io_setup(0x9, &(0x7f0000000040)=0x0) io_cancel(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0xa, 0xffffffffffffffff, &(0x7f0000000180)="c708121d493f59aaba42597d2967d020e650c36393335178ac8b39102cd2c9140de8af68972a597a1932c702a4d94c4da657b46bf0c8365e1badd6caca3d57380c7d15b39441f5b78bd8373291b5a411d3dec121ddff45957d2376ba3745eebc09eefc0c47a10d9bebc41ef277cf85da69f66277ac480d566e9012eb9d6ba91ff47c3a6cded1cfa66994b4ba40725e75b441fe7c16944ab7baa495e87a34577bb857311de40eaab3d9a27d5116379522ce1a03d06adeb878f8de063f0338f144f7ede98f127240dabc6656351abb4f1050624ac4935632cffc8cbaf81cfe36c572c8d0cbaa20907dba0c899e63a6eb3668986f30a668", 0xf6, 0x1000, 0x0, 0x4, r1}, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r4, &(0x7f00000005c0)='\x00', 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000100, 0x3}, 0x15182, 0x7, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, 0x5, r4, 0x8) write(r3, &(0x7f0000000380)="1c1016382f3e5e84315640b24787dc5a68b49bc9293d06aa522079431663e28e2e3c9a44c598a7b7881d96d8bd966b049e6c111bd94692c67e3fb5a4cf84d89cfd935d6becdd725292a25a5cde46f2be588d3bd7fa38d861fb707777a92d917b8ef37e850790a888da4ac85f83bee96c5c263cc6de0eb37c12cefd91c1c79e60657560b8839a14a84c1511db42fed316750610940be3", 0x96) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) 13:02:54 executing program 3: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x10000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1) io_setup(0x9, &(0x7f0000000040)=0x0) io_cancel(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0xa, 0xffffffffffffffff, &(0x7f0000000180)="c708121d493f59aaba42597d2967d020e650c36393335178ac8b39102cd2c9140de8af68972a597a1932c702a4d94c4da657b46bf0c8365e1badd6caca3d57380c7d15b39441f5b78bd8373291b5a411d3dec121ddff45957d2376ba3745eebc09eefc0c47a10d9bebc41ef277cf85da69f66277ac480d566e9012eb9d6ba91ff47c3a6cded1cfa66994b4ba40725e75b441fe7c16944ab7baa495e87a34577bb857311de40eaab3d9a27d5116379522ce1a03d06adeb878f8de063f0338f144f7ede98f127240dabc6656351abb4f1050624ac4935632cffc8cbaf81cfe36c572c8d0cbaa20907dba0c899e63a6eb3668986f30a668", 0xf6, 0x1000, 0x0, 0x4, r1}, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r4, &(0x7f00000005c0)='\x00', 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000100, 0x3}, 0x15182, 0x7, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, 0x5, r4, 0x8) write(r3, &(0x7f0000000380)="1c1016382f3e5e84315640b24787dc5a68b49bc9293d06aa522079431663e28e2e3c9a44c598a7b7881d96d8bd966b049e6c111bd94692c67e3fb5a4cf84d89cfd935d6becdd725292a25a5cde46f2be588d3bd7fa38d861fb707777a92d917b8ef37e850790a888da4ac85f83bee96c5c263cc6de0eb37c12cefd91c1c79e60657560b8839a14a84c1511db42fed316750610940be3", 0x96) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) 13:02:54 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x10000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1) io_setup(0x9, &(0x7f0000000040)=0x0) io_cancel(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0xa, 0xffffffffffffffff, &(0x7f0000000180)="c708121d493f59aaba42597d2967d020e650c36393335178ac8b39102cd2c9140de8af68972a597a1932c702a4d94c4da657b46bf0c8365e1badd6caca3d57380c7d15b39441f5b78bd8373291b5a411d3dec121ddff45957d2376ba3745eebc09eefc0c47a10d9bebc41ef277cf85da69f66277ac480d566e9012eb9d6ba91ff47c3a6cded1cfa66994b4ba40725e75b441fe7c16944ab7baa495e87a34577bb857311de40eaab3d9a27d5116379522ce1a03d06adeb878f8de063f0338f144f7ede98f127240dabc6656351abb4f1050624ac4935632cffc8cbaf81cfe36c572c8d0cbaa20907dba0c899e63a6eb3668986f30a668", 0xf6, 0x1000, 0x0, 0x4, r1}, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r4, &(0x7f00000005c0)='\x00', 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000100, 0x3}, 0x15182, 0x7, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, 0x5, r4, 0x8) write(r3, &(0x7f0000000380)="1c1016382f3e5e84315640b24787dc5a68b49bc9293d06aa522079431663e28e2e3c9a44c598a7b7881d96d8bd966b049e6c111bd94692c67e3fb5a4cf84d89cfd935d6becdd725292a25a5cde46f2be588d3bd7fa38d861fb707777a92d917b8ef37e850790a888da4ac85f83bee96c5c263cc6de0eb37c12cefd91c1c79e60657560b8839a14a84c1511db42fed316750610940be3", 0x96) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) 13:02:54 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x10000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1) io_setup(0x9, &(0x7f0000000040)=0x0) io_cancel(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0xa, 0xffffffffffffffff, &(0x7f0000000180)="c708121d493f59aaba42597d2967d020e650c36393335178ac8b39102cd2c9140de8af68972a597a1932c702a4d94c4da657b46bf0c8365e1badd6caca3d57380c7d15b39441f5b78bd8373291b5a411d3dec121ddff45957d2376ba3745eebc09eefc0c47a10d9bebc41ef277cf85da69f66277ac480d566e9012eb9d6ba91ff47c3a6cded1cfa66994b4ba40725e75b441fe7c16944ab7baa495e87a34577bb857311de40eaab3d9a27d5116379522ce1a03d06adeb878f8de063f0338f144f7ede98f127240dabc6656351abb4f1050624ac4935632cffc8cbaf81cfe36c572c8d0cbaa20907dba0c899e63a6eb3668986f30a668", 0xf6, 0x1000, 0x0, 0x4, r1}, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r4, &(0x7f00000005c0)='\x00', 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000100, 0x3}, 0x15182, 0x7, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, 0x5, r4, 0x8) write(r3, &(0x7f0000000380)="1c1016382f3e5e84315640b24787dc5a68b49bc9293d06aa522079431663e28e2e3c9a44c598a7b7881d96d8bd966b049e6c111bd94692c67e3fb5a4cf84d89cfd935d6becdd725292a25a5cde46f2be588d3bd7fa38d861fb707777a92d917b8ef37e850790a888da4ac85f83bee96c5c263cc6de0eb37c12cefd91c1c79e60657560b8839a14a84c1511db42fed316750610940be3", 0x96) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) VM DIAGNOSIS: 13:02:45 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b1e41 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff88801a507698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b1e30 RIP=ffffffff822b1e99 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa35fc3d700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3c06d296f4 CR3=000000001744a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000001a86 0000000000001a86 YMM02=0000000000000000 0000000000000000 0000000000882ac4 000000000086b5a2 YMM03=0000000000000000 0000000000000000 0000000000882ac4 000000000086b5a2 YMM04=0000000000000000 0000000000000000 000000000086d4a7 000000000086bfeb YMM05=0000000000000000 0000000000000000 000000000086b5a2 0000000000882a58 YMM06=0000000000000000 0000000000000000 00000000008742b8 0000000000872f1c YMM07=0000000000000000 0000000000000000 0000000000887ae3 00000000008740cd YMM08=0000000000000000 0000000000000000 0000000000882a58 000000000086d3db YMM09=0000000000000000 0000000000000000 0000000000882ac4 000000000086b5a2 YMM10=0000000000000000 0000000000000000 0000000000882ac4 000000000086b5a2 YMM11=0000000000000000 0000000000000000 000000000086d4a7 000000000086bfeb YMM12=0000000000000000 0000000000000000 000000000086b5a2 0000000000882a58 YMM13=0000000000000000 0000000000000000 00000000008742b8 0000000000872f1c YMM14=0000000000000000 0000000000000000 0000000000887ae3 00000000008740cd YMM15=0000000000000000 0000000000000000 00000000004643c1 0000000000886f9c info registers vcpu 1 RAX=0000000000000000 RBX=800000001938f065 RCX=ffffffff816a33fc RDX=ffff888010073580 RSI=0000000000000000 RDI=0000000000000005 RBP=ffff88800de4b2c0 RSP=ffff88801832f730 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=dffffc0000000000 R14=0000000000000001 R15=ffff88801b19f300 RIP=ffffffff814612dc RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f792d1638c0 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdcb10ef620 CR3=000000000e73e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 ffffffffffffffff 00000000000000ff YMM03=0000000000000000 0000000000000000 696e656420737365 636341002f737973 YMM04=0000000000000000 0000000000000000 000055f78142ac60 000055f78142ac40 YMM05=0000000000000000 0000000000000000 00ff010000ff0001 0000000100000008 YMM06=0000000000000000 0000000000000000 0000000900000000 000055f781425cf0 YMM07=0000000000000000 0000000000000000 000055f781425d10 000055f781416c50 YMM08=0000000000000000 0000000000000000 7269762f73656369 7665642f7379732f YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000