0540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000006840)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000e0000000000000000000000b952781cebcdde7700"/92], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x7fff, 0xffffffffffffffff, &(0x7f0000000180)="c65d865493306000f705db76609d70bb0a536fbf7e8a5c5cc9348854fec6564ed990c9dac2c496ada8a163b9e281de9859f3526c9bfb9f2c6d1bcd3fa7fbb094b669a507a1e71682b38d819f01c535924ebf029752a887d7e59680193c70be5596dc97544a", 0x65, 0x6, 0x0, 0x3}]) sendmsg$nl_xfrm(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000006840)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000e0000000000000000000000b952781cebcdde7700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b1e13d30c761ef"], 0xb8}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8004080) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r4, 0x0, 0x3) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 08:28:57 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc805}, 0x4083) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs(0x0, &(0x7f0000001ac0)='net/packet\x00') pread64(r1, &(0x7f0000000180)=""/16, 0x20000190, 0x68000000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)=ANY=[@ANYBLOB="2a99f4bad69af0222817f2e9805d86809820614069d00500969f3e211049e45e663c9252fd90ecb02500ec8040e8bd315fddbe4fa42633406418d358f6e5457da59577281098885e3d00e34a3763915358c215a90a3023003cb4e2672d6674e20be5f70dd4558d8f2944eeb96d7d21a8e6243f99efcd5ba3d397774062b83142633fab4cd17e274907ccd0359b70d84daf4160a09aee3b797f7c2ba3326a37f2a9c42d767c9622407a838635ccac3c05e2789050e4f9483758853ee93886f2f44578f97f35d2d9f803959c2677c80174a58a080c0730196ce22ed68807de274d7b47e55adfd0bca2cbe38b00000000000000", @ANYRES32]) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) 08:28:57 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 08:28:57 executing program 6: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000140)={0x8}) r1 = epoll_create1(0x80000) dup(r1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e00", 0xa0, 0x8800}, {&(0x7f0000010d00), 0x0, 0xa000}, {0x0}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0120000000000000200000000000000000ed000000000000ed66001c0000000000001c0008000000", 0x97, 0xe000}, {0x0}, {&(0x7f0000011700)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}, {0x0}, {0x0}, {0x0}], 0x0, &(0x7f0000012200)=ANY=[]) epoll_create1(0x0) 08:28:58 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0x69, 0x2, 0xf9, 0x81, 0x0, 0x0, 0x201, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9a6, 0x4, @perf_config_ext={0x8, 0x3}, 0x18020, 0x6, 0x9, 0x9, 0x4, 0xfffffff8, 0x8217, 0x0, 0x6, 0x0, 0x500000000000000}, 0x0, 0x2, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x3) 08:29:13 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0x69, 0x2, 0xf9, 0x81, 0x0, 0x0, 0x201, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9a6, 0x4, @perf_config_ext={0x8, 0x3}, 0x18020, 0x6, 0x9, 0x9, 0x4, 0xfffffff8, 0x8217, 0x0, 0x6, 0x0, 0x500000000000000}, 0x0, 0x2, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x3) 08:29:13 executing program 1: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) syz_io_uring_setup(0x525d, &(0x7f0000000300)={0x0, 0x834a, 0x0, 0x0, 0x28c}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="880000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB]) r1 = gettid() setpgid(0x0, r1) r2 = perf_event_open(&(0x7f0000001240)={0x4, 0x80, 0x8c, 0x0, 0x3f, 0xfb, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x66b}, 0x52140, 0xfffffffffffffffd, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2000000}, r1, 0x0, r0, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xfffffffffff7ffff, 0xffffffffffffffff, 0x0) write(r3, &(0x7f00000011c0)="25f603b7fa9fa3548414f40992c1cf45f19705c7eee437fda4265b7eb2e7bb1ca4ec9b16e7d8334d052aeb04b0d5037a01019288274bf0cb88e4b0d450527f3e3100845f824bd7c768b941db8d3d5f400ea29894fe6bc6553b229e9e616dbeb1b077c3ff25d19fa7ce2453d6417761", 0x6f) r4 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x5, 0x80, 0x40, 0x9b, 0x4, 0x9, 0x0, 0x2, 0x40441, 0x6, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_config_ext={0x1c00000000000000, 0x8470000000000000}, 0x2, 0x400, 0x4, 0x7, 0xff, 0x2, 0x3, 0x0, 0xf3b6, 0x0, 0x8}, r4, 0x3, 0xffffffffffffffff, 0x8) syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_complete(r5) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x40000000}) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2e4}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x7, 0x23, 0x4b, 0x3, 0x0, 0xa2, 0x120, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5b2, 0x2, @perf_config_ext={0x3cb, 0x8e98}, 0x6800, 0x7, 0x1632, 0x7, 0x2, 0xb, 0x8, 0x0, 0x4, 0x0, 0x6}, r4, 0x6, r2, 0x0) write(r7, &(0x7f0000000080)="01", 0x41030) 08:29:13 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:29:13 executing program 6: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x50}}, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8040}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x20}], 0x3, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'caif0\x00'}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/mipi-dsi', 0x20200, 0x80) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000003c0)=0x400000) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000480)=ANY=[@ANYBLOB="4a4036f40a11dc1d20c8ee63d0fcd058fba132d1292b3bee4f786a29fdb6b2e2a93656ba6dc8cfa4c9c7653cd54c33d9c3c8e1f320c06e6e941c182cd113d561b608535a00f291712e3e4f6f7a18f4eecec26d59b3927b2c90990dacc3a19948b5f557f6b205e0e63297099ab1f4cb6faabca57539414d2b419a38c3742f4cc226301d85111c2dfc9277757e6daabf76dacf06a9b798fe52fdd7f8c28e80297f0a7572611b1f948e3c391a866c66703f12b73f22ecf255a5482c028bc32c02b3163692c96845cfcf0c32e292f0f50c607cc19edcb484192379e4eb0e677fcc36144a4fa3abbe138d2165064672ee184d47bf016b207654a7c39f289effe5401dc7404044412f28fc24b5837bc7da4866a65004b04cfd60dcee84d8da66bb4a3b88cc14e65dc6c72f8a233df526f8ef8811996d1900000000008f80fc2f7c618a6a1a09c1655877c9ec81bf4b8cf0e08fdab0d5a377e722c1"]) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netpci0\x00'}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000009, 0x100010, r1, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) 08:29:13 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x400800, 0x0) r0 = syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '8^W', 0x14, 0x6, 0x0, @remote, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='mountinfo\x00') sendfile(r0, r2, &(0x7f0000000140)=0x8, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x650881, 0x0) inotify_init1(0x0) 08:29:13 executing program 7: syz_mount_image$nfs4(0x0, &(0x7f0000000c80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x5, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="c595837b6339a8ad278e80ac1a7cfa072ae996fa6e96b0c910ee872e937654dade70618254aba394b908be2859ca4ad3750cabb27404c320f2000015114e1e8fa0ce5b7ba79248418f0cab1756db2d1b989e568f7d35a6c5090fd0128a97495641253c522b8e914d679e8b59779e6236b2013ffc842b79f9bbdb41fb1739e062bcd4d4277ef8447c9f1d53df9fa6cc5a095730e1f321f920e7", 0x99, 0x100000001}, {&(0x7f0000000300)="acdc896ad3b7ec9d928c9e299273351e38ee16cb9043ca2857b5b647a6314fe5d7bb22df6328285876cfab85f378c54b03e7d97b2aa673cbadba52c4539edb8198a7b49ec6b609f5d7f2a266a7959c19d76a4df42162ba980c773334ac1f61536e9eb0671478f01440bf9714aa3bfb808246890a962728f9abfd", 0x7a, 0x9}], 0x200001, &(0x7f0000000400)={[{@shortname_winnt}, {@uni_xlate}, {@shortname_win95}, {@rodir}, {@uni_xlateno}, {@utf8}], [{@euid_eq={'euid', 0x3d, r0}}, {@smackfsroot={'smackfsroot', 0x3d, '(+^1]\xa0+:-5/{/]'}}]}) setresuid(0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x89e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:29:13 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000006840)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000e0000000000000000000000b952781cebcdde7700"/92], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x7fff, 0xffffffffffffffff, &(0x7f0000000180)="c65d865493306000f705db76609d70bb0a536fbf7e8a5c5cc9348854fec6564ed990c9dac2c496ada8a163b9e281de9859f3526c9bfb9f2c6d1bcd3fa7fbb094b669a507a1e71682b38d819f01c535924ebf029752a887d7e59680193c70be5596dc97544a", 0x65, 0x6, 0x0, 0x3}]) sendmsg$nl_xfrm(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000006840)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000e0000000000000000000000b952781cebcdde7700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b1e13d30c761ef"], 0xb8}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8004080) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r4, 0x0, 0x3) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 08:29:13 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) [ 290.256187] loop7: detected capacity change from 0 to 264192 [ 290.295632] FAT-fs (loop7): Unrecognized mount option "euid=00000000000000016877" or missing value 08:29:13 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000200)=0xb4, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)={0x38, r5, 0xa1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff]}}]}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000039c043f6970341999833e8e90d2470c4010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000013000)='PMM', 0x3, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000013b00)) 08:29:13 executing program 6: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x50}}, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8040}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x20}], 0x3, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'caif0\x00'}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/mipi-dsi', 0x20200, 0x80) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000003c0)=0x400000) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netpci0\x00'}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000009, 0x100010, r1, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) 08:29:13 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 08:29:13 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:29:13 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x400800, 0x0) r0 = syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '8^W', 0x14, 0x6, 0x0, @remote, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='mountinfo\x00') sendfile(r0, r2, &(0x7f0000000140)=0x8, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x650881, 0x0) inotify_init1(0x0) 08:29:14 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000006840)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000e0000000000000000000000b952781cebcdde7700"/92], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x7fff, 0xffffffffffffffff, &(0x7f0000000180)="c65d865493306000f705db76609d70bb0a536fbf7e8a5c5cc9348854fec6564ed990c9dac2c496ada8a163b9e281de9859f3526c9bfb9f2c6d1bcd3fa7fbb094b669a507a1e71682b38d819f01c535924ebf029752a887d7e59680193c70be5596dc97544a", 0x65, 0x6, 0x0, 0x3}]) sendmsg$nl_xfrm(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000006840)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000e0000000000000000000000b952781cebcdde7700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b1e13d30c761ef"], 0xb8}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8004080) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r4, 0x0, 0x3) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 08:29:14 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000200)=0xb4, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)={0x38, r5, 0xa1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff]}}]}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000039c043f6970341999833e8e90d2470c4010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000013000)='PMM', 0x3, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000013b00)) 08:29:14 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0x69, 0x2, 0xf9, 0x81, 0x0, 0x0, 0x201, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9a6, 0x4, @perf_config_ext={0x8, 0x3}, 0x18020, 0x6, 0x9, 0x9, 0x4, 0xfffffff8, 0x8217, 0x0, 0x6, 0x0, 0x500000000000000}, 0x0, 0x2, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x3) 08:29:14 executing program 2: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 08:29:30 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) acct(&(0x7f0000001200)='./file1\x00') pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='9', 0x1, 0x8040000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x4e20, 0xffff, @mcast2, 0x4}}, 0x0, 0x0, 0x15, 0x0, "b25da62d685a38083e45ab1950001ca46105939b4b3d83bd945bed03b30b62897693132cb6e12788b1d58f9b2fff886055bea488ee0e2918a8c961a2684924dfa9841132b1916476e31d06d76d34a918"}, 0xd8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001180)='/proc/vmallocinfo\x00', 0x0, 0x0) preadv(r2, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000000)) 08:29:30 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/../file0\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000380)={0x0, 0x3ff}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', r3, &(0x7f0000000180)='./file1/../file0\x00', 0x41) r4 = openat(r2, &(0x7f0000000040)='./file0\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r0, 0x0, 0xfffffdef) 08:29:30 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 08:29:30 executing program 2: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 08:29:30 executing program 4: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 08:29:30 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0x69, 0x2, 0xf9, 0x81, 0x0, 0x0, 0x201, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9a6, 0x4, @perf_config_ext={0x8, 0x3}, 0x18020, 0x6, 0x9, 0x9, 0x4, 0xfffffff8, 0x8217, 0x0, 0x6, 0x0, 0x500000000000000}, 0x0, 0x2, 0xffffffffffffffff, 0x8) lseek(r2, 0x0, 0x3) 08:29:30 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x4, 0x5, 0x88, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4a1, 0x2, @perf_config_ext={0x9, 0xe2a}, 0x43004, 0x0, 0x2, 0x5, 0x1ff, 0x5, 0x3, 0x0, 0x1, 0x0, 0x400}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x1) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = fcntl$getown(r0, 0x9) tkill(r2, 0x27) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x6, 0x7, 0x2, 0x1, 0x0, 0x7, 0x88040, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x4, 0x6}, 0x6090a, 0x4, 0x3b, 0x3, 0x5, 0xc630, 0xffff, 0x0, 0x1, 0x0, 0x800}, r2, 0xa, r0, 0x2) tkill(r1, 0x16) capset(&(0x7f00000000c0)={0x20071026, r1}, &(0x7f0000000040)={0xfffffffc, 0x0, 0x1, 0x0, 0x4, 0x1}) ptrace(0x11, r1) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ptrace$setopts(0x4200, 0x0, 0x1f, 0x10007b) mount$9p_tcp(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x8, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@afid}, {@afid={'afid', 0x3d, 0x4}}, {@access_user}], [{@obj_type={'obj_type', 0x3d, '/proc/locks\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@obj_type}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}}) 08:29:30 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) [ 307.254463] Process accounting resumed [ 307.332529] Process accounting resumed 08:29:30 executing program 6: creat(&(0x7f0000000000)='./file0\x00', 0x6e) r0 = open(&(0x7f0000000140)='./file0\x00', 0x442, 0x63) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x300, 0x70bd28, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0xc0) 08:29:30 executing program 6: open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x37bc, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000006c0)) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$incfs(0xffffffffffffffff, 0x0, 0x30040, 0x24) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat$cgroup_type(r2, &(0x7f0000000340), 0x2, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) sendmsg$netlink(r4, &(0x7f00000004c0)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbff, 0x10}, 0xc, &(0x7f0000000080)=[{&(0x7f0000003000)={0x2578, 0x3e, 0x100, 0x70bd27, 0x25dfdbfb, "", [@typed={0x14, 0x78, 0x0, 0x0, @ipv6=@private0}, @nested={0x41, 0x6c, 0x0, 0x1, [@generic="463aa66ce2c60d2eca105882f1e1555b173e5e6faf764e85ce76ecec08e7004826b623715cc7b2b6c20493f1c15c2d526fb9700663b06d2a503e1310dd"]}, @nested={0x4, 0x4e}, @typed={0xe8, 0x5c, 0x0, 0x0, @binary="701034f82a11096da9e400ddfff8e65e726bbb16bfc1843c5cb3de7bdaad1ebd807c85bd0be44b8f22493563e42297dcca81fe50ae98de9ca04e42a316c3ff9e176f10812ccaccdb08397892bba85d7725e2a7c858dee282507fb3533adf24d8e82dda58acf7fcae255a279997bb4bd70a1d78d036c73e9f8fe225a4ac9dbafa9798683dffb35c03db20f32e1a249534a2db48534d555cce6952a086c29d3a8ea1c0cb7562cbd8327410bdef3d35b7116ffd8dc22baa4a0a1ad109c4c9d57a842347800358e822c10aabd8ba229cdad112e1d59dfec431fa0e8dcd7e67fe139ffea92836"}, @typed={0x8, 0x17, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x137, 0x7a, 0x0, 0x1, [@typed={0xc, 0x14, 0x0, 0x0, @u64=0x80000001}, @generic="e7fed58ba34cd0dd2bb7b2c3b47fbb119d7bfd1e4882de15b97af706b73a6f9fe8560659ee340dcd15ecf6353ca473f1b2feed007ae877b10af3f00a31ebeb98e8bd02837f4541d8166c1a93a584df618691e0e1fff5c62adba5a8c91621973f75abf852df8f902243ead3ec51f529e9b9c59bff40814bc06a78155a9b623d", @typed={0x8, 0x93, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x9f, 0x85, 0x0, 0x0, @binary="1d7d21c010c326a2451fd751b49c41cf0d58d26a165dfcb3c0d230273cf8b502225ffd63cf253b8f27da8fdbc97f7ce5d8fcbce0559b8083bef2d8b2315e5571bc28f3430acdc05a2e73004a41e40f87a53583037ba48c04f98ce3a82ab245300eb98408565fbb95369cc3546b1b72ca3c951c8b11fdc88bbff7ad6d7e253800334ef05dd8bcdd3069b7ae028149d51e2e4d42b7129ec4eb16a3f7"}]}, @generic="d36fa009d39a7a3f98c11351ff3c72f2cba54cc762459ca0f887ff0da64b1ab6399e54d1d8bafbc9b68e8f85d0a3a188936a0ce573b7e3fd1be69fc5cdf9f73c0568587b83437da6199e3c0b1d0f17f8909f07eae67a3ded88e5", @typed={0x4b, 0x96, 0x0, 0x0, @binary="8ae7204b7ad7707b408b6291d144bb51b44e8d8035b57a40c7f4b745d5d273bb74440f8ddb1b7390b0401c7de055e247747369b224fee360086fd9866253eb2e1b9d8e78017302"}, @nested={0x223c, 0x5b, 0x0, 0x1, [@typed={0x8, 0x59, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x54, 0x0, 0x0, @pid}, @generic="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", @typed={0x8, 0xdbd, 0x0, 0x0, @ipv4=@empty}, @generic="740826e683a30790627a2d7b2c8986fc588bd9fa4f92a662f79c12fc83c92a4e6e0a3a91b8ecc8a47a2181eb6a2123d2e518", @generic="ff1338172be03151c3e7bb56e49788814a99e17352f28b043a2f8fbf91c3ffd6c159265eff1ed06ff94f56c135cf29a0c7c7a5c9a4984f65faeee9fc13a4508a2f27278462d8e71ba1238fb3c4e8f139807dac5a7d89b31e9c05ffc7496476afc06f33dc75dac607de6d953a7a57062fe674b5c9bc2d14f8bad784450ff2b197ff530f7664b0bdb1f5a5dbe0a8e5d9b0989ca899be1ee204a6611da6429f8fa8d3dac1b46b61ce0bb61b97b89e6da29e6b5351e1e0817059e43ce65afdf0daa4a049cf319eba48", @generic="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", @generic="aed45bdf38de52e36c59919f2ae288c8e2ab48d3c237c769cd96c5c708b8fc04775a96c6aea24992d4e12dd4bfbfb511fb225820b352f18fce277138e6f47b3259a0999f1d1325034141f1042ca7ed4108feaa8ff85c41103aefcaf41726c4edaad9d5052b2c3bce3f281c55fc", @generic="fc2b063c0a73f4b700c9fc76eb259f6d8700df4ee27698ab6e9c11035598dc2a354fdd2e7f1cdd63d45a416db861b8dc3bb2a8c6ad6b775f88a92b29c3908cd9285faa97226a211bf6003098da4615b122f27321416cf0dbbd87b42c42019bd8cdc0a81b437462b76c3a3f5d2dc0ffe113c1772d2d8d4f13855425817e207143a4b25e565c016629cefa6113249b8f8f09e8c22279419c1a62d3cea70daca52f3db8a3afabf0bfa526f0011077462c9cca20", @typed={0x8, 0x40, 0x0, 0x0, @fd=r1}]}]}, 0x2578}, {&(0x7f0000002c40)={0x38c, 0x3e, 0x20, 0x70bd26, 0x25dfdbff, "", [@typed={0x8, 0x21, 0x0, 0x0, @fd=r1}, @nested={0x373, 0x94, 0x0, 0x1, [@generic="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", @generic="c29e603bcc51d4164ebaef0fd7c0ea8ad8d11c3497480a9b5e844c5b17dd95f71b575ea2b7be791a8c470ac8943787020766594826c200c56bc9e33fdf89aea541b0479e0b88d6169d382a9b1980eb4525d33f367780f1bc7a11b6da525608bad62bace21fb9a36e0e961cfcbc969977b71a436ebaf560fe465e3fa0021e6ca5141dcc114484afa4deda4f03b79c8571008d9dc0dc6670f8f134ebb2c40985551796e91c7653e46bda896a657798855046598f7bb3dab798733c89274110553fd1649a69de841e366329a410", @generic="8e1031976b16441e4c94c1fb197386ed6f9cc01a19bd1c059b1fe601d24f8b47c8027fb1d5a6e6c9acbee6f229cb7fad48040f934c00c2382a9f4660bed5b3de6d7a1c85579782cae1182ad31857433d20352771509c0d39f089f75802dac076093bc86b5d005efa05cb4c3c8f73a13dbef466112062a1755d8a52c150e6e3e27e6fb7b490bb25d219ab16493ce35ac6e87f2c96c8805dcd7ae67d08e01d58e290f207aa8467bf1391d93d8c3570999bbe8f0e3bd9c7911e21e3dbadcff2664fe2fde8333dc096333df5a4eea4c2c1f319881aaf2127032d8583c54a38468b28b038fd40b79945f4f387f7f71e8856a3", @generic="102e43d4f6df883510297709c19eb1a03a66b7ca86bdd3bd1a942a9805f682a4e43a4b825b2bd89cede234a7838d58889e94b713456c13103b58eaaff6e3d0c906498aa38138763d0bbf0aa899a4a92f91ebaa36434d0d38b6962214b08ab1c0b14b5571d3e72ad347fe0460b62f40eed169bba89c160999256a0806a993e842c6457907eca33f5168104cfc0026613f555c115fa5f09dfb828d81c5b0a41ccff280e1", @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@remote}]}]}, 0x38c}], 0x2, &(0x7f00000003c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r2, r2, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r3, r5, r1, r2, r6]}}], 0xc0, 0x20000810}, 0x40) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r8, 0x87d27e71721737b5, 0x0, 0x0, {{0x5}, {@void, @val={0x8}, @val={0xc, 0x135}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r9 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r9, 0x0) 08:29:30 executing program 2: r0 = io_uring_setup(0x3ef, &(0x7f0000000000)={0x0, 0x0, 0x11}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xfffffffffffffffe}}, './file0\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f00000000c0)={0x9, 0x6, 0x0, 0x0, 0xa, [{0x1, 0x80000001, 0x20, '\x00', 0xb00}, {0x0, 0x9, 0x2, '\x00', 0x100}, {0x7, 0xffff, 0x7, '\x00', 0x400}, {0x7, 0x5f11, 0x2, '\x00', 0x1200}, {0x40, 0x1, 0x6, '\x00', 0x392}, {0x90eb, 0x100000000, 0x5, '\x00', 0x2180}, {0x10001, 0x8, 0x1, '\x00', 0x80}, {0x4, 0x4, 0x6, '\x00', 0x148b}, {0x5, 0x9, 0x4, '\x00', 0x404}, {0x64b5, 0x3, 0x4, '\x00', 0x400}]}) 08:29:30 executing program 4: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) [ 307.556045] netlink: 'syz-executor.6': attribute type 309 has an invalid length. 08:29:30 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x8000) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffffe, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(r0, r0, 0x0, 0x100000) [ 307.790189] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure [ 307.843254] 9pnet_fd: p9_fd_create_tcp (4595): problem connecting socket to 127.0.0.1 [ 307.942501] 9pnet_fd: p9_fd_create_tcp (4625): problem connecting socket to 127.0.0.1 08:29:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={0x77359400}, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)) openat(r1, &(0x7f0000000040)='./file1\x00', 0x400000, 0x180) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000002c0)={0x3, 'gre0\x00', {0x1ff}, 0x405}) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000200)=0xb4, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r4, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x42, 0x1b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) 08:29:30 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x4, 0x5, 0x88, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4a1, 0x2, @perf_config_ext={0x9, 0xe2a}, 0x43004, 0x0, 0x2, 0x5, 0x1ff, 0x5, 0x3, 0x0, 0x1, 0x0, 0x400}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x1) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = fcntl$getown(r0, 0x9) tkill(r2, 0x27) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x6, 0x7, 0x2, 0x1, 0x0, 0x7, 0x88040, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x4, 0x6}, 0x6090a, 0x4, 0x3b, 0x3, 0x5, 0xc630, 0xffff, 0x0, 0x1, 0x0, 0x800}, r2, 0xa, r0, 0x2) tkill(r1, 0x16) capset(&(0x7f00000000c0)={0x20071026, r1}, &(0x7f0000000040)={0xfffffffc, 0x0, 0x1, 0x0, 0x4, 0x1}) ptrace(0x11, r1) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ptrace$setopts(0x4200, 0x0, 0x1f, 0x10007b) mount$9p_tcp(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x8, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@afid}, {@afid={'afid', 0x3d, 0x4}}, {@access_user}], [{@obj_type={'obj_type', 0x3d, '/proc/locks\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@obj_type}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}}) 08:29:31 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) lseek(r2, 0x0, 0x3) 08:29:31 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 08:29:31 executing program 3: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 08:29:31 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:29:31 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) [ 308.621185] syz-executor.6 (4618) used greatest stack depth: 22312 bytes left 08:29:31 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) lseek(r2, 0x0, 0x3) 08:29:31 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x4, 0x5, 0x88, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4a1, 0x2, @perf_config_ext={0x9, 0xe2a}, 0x43004, 0x0, 0x2, 0x5, 0x1ff, 0x5, 0x3, 0x0, 0x1, 0x0, 0x400}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x1) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = fcntl$getown(r0, 0x9) tkill(r2, 0x27) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x6, 0x7, 0x2, 0x1, 0x0, 0x7, 0x88040, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x4, 0x6}, 0x6090a, 0x4, 0x3b, 0x3, 0x5, 0xc630, 0xffff, 0x0, 0x1, 0x0, 0x800}, r2, 0xa, r0, 0x2) tkill(r1, 0x16) capset(&(0x7f00000000c0)={0x20071026, r1}, &(0x7f0000000040)={0xfffffffc, 0x0, 0x1, 0x0, 0x4, 0x1}) ptrace(0x11, r1) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ptrace$setopts(0x4200, 0x0, 0x1f, 0x10007b) mount$9p_tcp(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x8, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@afid}, {@afid={'afid', 0x3d, 0x4}}, {@access_user}], [{@obj_type={'obj_type', 0x3d, '/proc/locks\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@obj_type}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}}) 08:29:31 executing program 3: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 08:29:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x4) sendfile(r3, r2, 0x0, 0xfffffdef) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f00000002c0)={r0, r2, 0x2d}) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r3, 0x0, 0xfffffffffffffeff) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd602ddc2000183a00fc000000000000000000000000000000000000aa8300927800000000200100000000000000000000000000024b301bdc6e6930726d300a4ab6563fea2c01921d9bed580674b269ff8d2946f74e9a7d10f14a5b2cfb505fc87727b1f750c63fabcf7fcaf35ab647cb5d1b79c1d08ee7d4c921812346418d7beb612accafa76f7ec230ccbb63cf56953ebcfb53f88207b580bd8e3270a315c6c648552dd02af13c998c3c8a24baae532bbaac5ff3bf5363b94d3b5ace1d6a24373e697524b90b6d5400"/227], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r5, r4, 0x0, 0xfffffdef) recvfrom(r4, &(0x7f0000000140)=""/191, 0xbf, 0x43, &(0x7f0000000200)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80) 08:29:31 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) lseek(r2, 0x0, 0x3) [ 309.387512] 9pnet_fd: p9_fd_create_tcp (4633): problem connecting socket to 127.0.0.1 [ 309.596139] 9pnet_fd: p9_fd_create_tcp (4658): problem connecting socket to 127.0.0.1 08:29:47 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:29:47 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:29:47 executing program 3: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 08:29:47 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:29:47 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x4, 0x5, 0x88, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4a1, 0x2, @perf_config_ext={0x9, 0xe2a}, 0x43004, 0x0, 0x2, 0x5, 0x1ff, 0x5, 0x3, 0x0, 0x1, 0x0, 0x400}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x1) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = fcntl$getown(r0, 0x9) tkill(r2, 0x27) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x6, 0x7, 0x2, 0x1, 0x0, 0x7, 0x88040, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x4, 0x6}, 0x6090a, 0x4, 0x3b, 0x3, 0x5, 0xc630, 0xffff, 0x0, 0x1, 0x0, 0x800}, r2, 0xa, r0, 0x2) tkill(r1, 0x16) capset(&(0x7f00000000c0)={0x20071026, r1}, &(0x7f0000000040)={0xfffffffc, 0x0, 0x1, 0x0, 0x4, 0x1}) ptrace(0x11, r1) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ptrace$setopts(0x4200, 0x0, 0x1f, 0x10007b) mount$9p_tcp(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x8, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@afid}, {@afid={'afid', 0x3d, 0x4}}, {@access_user}], [{@obj_type={'obj_type', 0x3d, '/proc/locks\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@obj_type}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}}) 08:29:47 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x4, 0x5, 0x88, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4a1, 0x2, @perf_config_ext={0x9, 0xe2a}, 0x43004, 0x0, 0x2, 0x5, 0x1ff, 0x5, 0x3, 0x0, 0x1, 0x0, 0x400}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x1) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = fcntl$getown(r0, 0x9) tkill(r2, 0x27) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x6, 0x7, 0x2, 0x1, 0x0, 0x7, 0x88040, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x4, 0x6}, 0x6090a, 0x4, 0x3b, 0x3, 0x5, 0xc630, 0xffff, 0x0, 0x1, 0x0, 0x800}, r2, 0xa, r0, 0x2) tkill(r1, 0x16) capset(&(0x7f00000000c0)={0x20071026, r1}, &(0x7f0000000040)={0xfffffffc, 0x0, 0x1, 0x0, 0x4, 0x1}) ptrace(0x11, r1) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ptrace$setopts(0x4200, 0x0, 0x1f, 0x10007b) mount$9p_tcp(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x8, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@afid}, {@afid={'afid', 0x3d, 0x4}}, {@access_user}], [{@obj_type={'obj_type', 0x3d, '/proc/locks\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@obj_type}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}}) 08:29:47 executing program 2: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x1c000000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000240)=@v3={0x3000000, [{0x7f, 0x100}, {0x5, 0x1}]}, 0x18, 0x2) socketpair(0x9, 0x5, 0xffffffff, &(0x7f0000000040)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0xb) sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x14}], 0x1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003480)={&(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdbfe, 0x40}, 0xc, &(0x7f00000033c0)=[{&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="080090000200000004001b0014007f00fe8000000000000000000000000000aa08000500ac1e00010000f5004e80127d0edba639e7fa93f2829580c370995e4bc047e1d1ed3d42341e49212c0a5314e59b14375c627bef3a1b8e315010057e1a233297d887b28a15a8abdeb603fb08b1ae94c15fe76fc041614a04c2818b9070bb818c56647cfb08a77e26def6f4ebd011eb695bbac2b07508fb6acbd02c6428df13c64035d05fcc8eb4f89f29e0302079a2c7d9a31e6108000d0008000000750d19854d76d82ec309ba642570df42a1b0062e0cabf59afdbef8bada7d08849081f85111b1b326dedfba8025661c0c03137631953d188abd6b55431462814b9a05d50627e7e4c6dc24c4c5f89f12a955b15269c619a77c000000"], 0x2a8}, {&(0x7f00000011c0)={0x1230, 0x39, 0x2, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x21f, 0x5f, 0x0, 0x1, [@generic="a1eec5fd329fe9135d874a6032f34b753f1cee7e7fbd6fa5981db412bb83a60b62695a3dad9ac6279526f941f5", @generic="40f4f711ba2b746b1e7bf5489b8e8a93c12b768196f86f0afc0e7c13090e0fadeb39809fac2206defd2710b2ef18a2cf66f827d5b3ed6dcd7bb3244f29db79609cd8b1f9718ccbafc1361a7e819a09fdb87b4091a87b1445300f653863e72e9863259925fa5a634b3ea258c393e42f4d8e037079616e95c1f3ec255d7d375ab1bb80ad79bf98f9a0aa553c5575933d29bb823048e067c75f89ba9b03bd39a6f88fc2fbabccf50e5e7b7c873084286d2dd4241d4f2b8b4ff43495ca6e2e584054fe90150ecc6e8acf08d8", @generic="31588f0ab94b215bc441fd3be4dbb808b52f78529b67bc12da6fc20ffda262d1522743b15d61d6d7ea6c0a22f06e250206a35942a9e57f4f2ba9a2cecf0ef4d4e7d2654b0365916f06ecbb4def69338acfadd3b5ee35", @generic="938481037bb3706b89fee707c7b2efbd2785f82063438164585ca8892bbfad3ba0f7e2235f02052dd682124a6d735859fc8cf122801e4103259a6d73fdcce80df8104dd78d8c1659dc196874100280b51d13c0469dc38f641193756d1736b9963ff48e81a01dfca6188bd23423755263b65a220df65aca6db8230edc", @generic="f89d392487e6f479ca522c45059a2a6ed5b07283ec5bc9d1352f9c3a7f1ab74cea830acfb29d4fffb0519266b0433cedac280af56ff413e169a8892547d1d5dec61a85129d6627520e8a", @typed={0x8, 0x74, 0x0, 0x0, @fd=r1}]}, @generic="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"]}, 0x1230}, {&(0x7f0000000580)={0x210, 0x18, 0x300, 0x70bd27, 0x25dfdbfb, "", [@typed={0x4, 0x4c}, @nested={0x1f9, 0x74, 0x0, 0x1, [@generic="239ff894660e9d120926a3d2dc716c45d286f54515469302869f66fd5ab87ebc4e5a4df4710a99e71f47993d3fda3ee116bfb4df09657e840693e684208ef1cbaef49c2c3a9c2236dbd569fed1d16918cc9ebb343904075e93219bb96b0f6070e0914189dcd2154541434ffd8c6e9bdd3aa46d430c41a73b9db32bd7fe73acaf15f832cbe613383587fc42443ec6518067553dc97c007178e5ad4e3c5f57ce521aa635f309bd557ce6da1affae8a2d2e5092c2e9ab89f11610270250e920f773561e8f5552818047f29920056091b95796d533d76d89cf", @generic="464a56c2352a676548cc630a2c566a56990f83264439e28a98392d82a08dc99b619dc8831becb29575e0db6918572505e3bbd63e9eb25b115a82ae67ea2f85171faeaad9aa1abb2d88671be87e00ebf9ff14c37ae9949b0e37fae7423cc4ccc0215b4c19758e8a6942d797d3a35727642416e1e8b403e38ff1087389e335744665", @generic="9c1b2fde5b6c440b4e5cee2d961046bd24233c65cf567ed20aec8caf78d8863ac97f557f9c59e7ef10211d7f70ea6887377f088897191e3f6ca9c90fac3ac62f2fccb6429e771e6c354cbd3789579547dc845f24c166b5b02c5882ba1124f7e9bd91ce0ab2161c733ef31ecca7a53087842464fb3e3a787fe2432dd83217f82ba63665a997b6479f1c04368a9af36cd5e79d2ff2f7aa2e55e1ea6c2b5e"]}]}, 0x210}, {&(0x7f0000002400)={0x5ac, 0x41, 0x400, 0x70bd29, 0x25dfdbfe, "", [@nested={0x471, 0x3a, 0x0, 0x1, [@generic="f6be3fb394d277ddc82bd2e568fa257f503eb45feaf2fa93344062d351e73e43eecf6a8ca369c943a1176cd44e0db0f2f589bfd8a2dc235717119bed5c181841c2f7e26fa1242371b3d70ed5fb552af0c8c57a737e895a416018ba293325edb8b3c41ce03f0a5fa5bf667317b5030391795a53e674a5b4d2b64176477e330d7e0b3047fb6b7276d87b25cbc96d59f1f566f6b7bd16a1ae9d38caf56d9bd2b89e9292c6f8353b4dbe58c3aedba749a3a618dc37991c97c7244eb1b56a40701d70dd4aac0e8ca27214b7b91701b285c7f94b3b27014364e6006783d1c8c4872b0d6573602ae2e9ec1e73b901c6c6f9a00c86b152b6fa8e0d", @generic="5cc3904fc13f60dd2fe8137a7204266b5ff682e75350ba2ce9a619dc9edae8f4823c3b0109a8a5957797e9832c2715d4cd2b6fb38407c709bb1c211949a4adba6f92d931c98631933c1ae9fc5fd2be014121057bc7c21b6d129d9c2a8b3e5932d7f9cefb6aed6ab2591681b58341849ddc86ea55803ad22953a64982e2f67962bd9b7bd919e5792e5d367565ad285c9977ea8de384981ba84b76dac7dfbbe3ca82baf6036937b38b1af322e6f72c6f42b7821d13aa3ed95b121c78d19535ad69e5cb5a1833", @generic="5b4021b4b0e664ba5a7e79ecaae49f0d1662502a199081ed05d4383cdd5d4128c0872604ca9bb094db5482d6ab22f623042e3494ff0892b1ac1f936d9ed0940ad5b6b238c885a416098a9cc266ba6b06", @generic="ab31baa3437096811cdbbf25a1c918991087cc2fc9deee689add4eda7fe59d995c6cf312cb73c47a91183ee528e4bad4f3cc8eba7eb09e4db9ffed5e83d183b68099fb9f4201e22aff72bd815a20a6701307536a2c173ff3f47abb2b1f1144087c48b882e6702e6d28996f0a3cb5f70f13c6830ee5360ba82bcc0e6e3806001399bdc439f787d403a6254790fe17ed9bfd", @generic="f2a07d1020f432fc2dff987d7d2858442a6ceaa70acc5e03f53c5226d777549b21809ace5ea9ad668037d0e5d6876627da01d9b2866ab514e70982d5c70295b64db6732d29314453f9e5d628d4a10266a60177263b753db5bd1b3a6a815258cb418c54693614b7accba3f24d795c1736598049faba3244041714a03704c0e973bb44221c491626fb4da30c7c7f10ef500091", @typed={0x7e, 0x64, 0x0, 0x0, @binary="dfac149239bd1b9e9eef37dedf49e118ff54174240ed0ff95fca8e6ce5fe2985bf67ff3983ca7d4f2cea6a0139830eedef48ed685341fd9c1f50a3b6fbc734a35e8d4f11dfe1f22f6078c558d61059b8733d7d78103d72b2fda1aa53effc726b7cc57a188c4fca6941b4a39cb317263c91c46aeb6f787b0e5ee4"}, @generic="acf521b0564028459e87579c85d408cef0b659bcfb73e84322dbc4b6ac3592fee3009fc58fbd361f865d605ee34ab482e65f3807ac779661e5d06ded08bd200111451d281f8bd07a4e99c8d9940cffb600c1b00de76c9c434108080cc5a6fd5fc1d191d7f936a49ed2511b7a65cb509542d6798f7d5ff9a6574ebbd5c910461bc1832b54147921b79e65c669dd5b868d0d91593425a75cec32a8c5ee91171267bc155da1df0353c96466df23fe9130e32902d796ba9fa53d75ceb3829a49"]}, @nested={0x59, 0x50, 0x0, 0x1, [@generic="50573328b62a00138c71f93015885d802dc9dde872f2ee1bc5c93c5f1181732e0970956e0bbec75d428bc288ea9cd54a0cc71f7aa7bedcaadf63f236397df69a4b", @typed={0x14, 0x8, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @nested={0x5b, 0x1b, 0x0, 0x1, [@generic="38da8773c835e27daf85754ef9e0824615d800b618cc6bc95d12d0056a85e578463bb208d02a572f7d44d51aff6b83535221414bdc461549aac13fd8f19b2d64879bd26a8a7fa05ab3ba5a9d4f2dcde64b8f8decbda691"]}, @nested={0x70, 0x25, 0x0, 0x1, [@typed={0x8, 0x6b, 0x0, 0x0, @u32=0x40}, @generic="bb1399fe4cb73b0b74299e1596a79c993697cd7c7b7f5a02521957e447fab203b5cb38c371bfff1a5afb2b1d4bca516694600eb147fcc8d6d213d5cbbc3ad1a80f98204d673cc90fe2dc3c89342f09d4c39c299fed592d32f655d50b", @typed={0x8, 0x58, 0x0, 0x0, @fd=r3}]}]}, 0x5ac}, {&(0x7f00000029c0)={0x74c, 0x31, 0x9635a5a3fbbc7af3, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x1a3, 0x18, 0x0, 0x1, [@generic="13c3939e243253212966201d140b7fc46f2e93dac9adb45651546a44916e68ec0848f86ff5b6d4e15bee073a740aacde3dbec48a38256e78ec0e849a106427606127c09e27b814193de703afb446839739635407760e663d3c501ea0c38f9e90a42e4bca3ef73534150dd215aea00a5b041a3aa0fc1ca10a115e396b35fa2fed8fdd403809e9e8f7e14aab9794f0d074c459aca90d1af4983bd045351c7e57725f44721d33c6d51a25584f64dfa42fffe2e12d944141e53bf853db769ef29a2a14325c9d280308c3eceb5d161f58ada1b2eaccfd4fbd26d73858d9f7d2c8e96ff81c0a2876b1bc1f844995a8581f46a430b52b", @typed={0x8, 0x3, 0x0, 0x0, @uid}, @generic="d37545ae5bbacf8d59225fc9011a1237b548673b623fa5fe443fcd445aaa74b29dd875a245af744ea7225fdccf4e7e0e4ac3e02a95702ecf39d624c3169d148bc3665c9e22af48c2b0018c85fbfa5ae9332df601162e11118565f5955059c2eafecdd0c6cd1aa60a525612131cd337c2ba4de72e58e54ddf5e78a015f1f18e8a7b538a05a5018d2f476bacb3aff91fa3c9a04fac99763afcdb1ab99a", @typed={0x8, 0x5d, 0x0, 0x0, @fd}]}, @nested={0x232, 0x7f, 0x0, 0x1, [@generic="570d452c71fc1b005682b0eac8877549bd706ec89c5e8764730e39c49a4f2ee8204b9267a8cb79d5c07507d3425586d9b9ea84b5cf99c69de84ab773dd37f399f906d3ad6df61617182d0497c3c4c0aa2352bc5de9a2bf103f5a84f9fc21b11a963b2325a8681564fd7f5ae2df3f337eb9a0aa248d01597e08d60e0dae118e9ad71e58bbe75b978406ea3a9b7e314478d5a55b02ac40bd26b47f084e52a2105ef840f4c45cda08043e319a72dfbbd40899704c2211e2e850769b8665eb24911ef6000b2b", @typed={0x8, 0x91, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x6, 0x0, 0x0, @u32=0x7f}, @generic="2808b22955f7c4ad0dce2b24ef2f4ad9cdd17860e1bc855a97afed33ff7d336649a5e757d09974ce8b93b9ad797d2178f1738573e040e11422a4e7fdc56f29d0096586307949f3c977d6f9801145d1871636a3f66f62171ca0e3322d3f95d73569f7fd752c103a9f6bf70423ffc5a9d7ddd3104c0351aa8745fa03124ec422d983ccbdf4fbaad06f18c05bf61c8e48803e697b2f6e045c342a301bdb4c54bb0acb5d273141b884e975a9bcbb32a2d7e070ea761ae5284707eb32d952587ef0985285", @typed={0x8, 0x89, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="fcdc3a02e3040dd3dae1a70198b01088f086269477e71bc1438e804d0cddb420c874940176f8b974c3a690238e4ad9d9174bc112ec81d5a775e710a1f60db59e9c59a6787935efdb5a01bfcb8e6f3453b752b6d34f29ccdc84a1c3718a33e4eb8838b25de56143ba74e49d1ee93291ff348801d45700acb2af0f0ee6aa4936", @generic="f4ccfe527ebf6c94e5", @typed={0x8, 0x91, 0x0, 0x0, @ipv4=@broadcast}]}, @typed={0x14, 0x6, 0x0, 0x0, @ipv6=@mcast2}, @generic="af32ebb8083cd7e81350c2a417505ca3764a44d83662ca5ee3ce5af754ffe53d9d23d2127bd34f2a8bafa3c563fbdfaeae9b018ed7c053f666978a933d3277cecb07172a8c5e4c549fa2b2e9c0d0c50bbbb79026066c6bd4bad1f3e5a383f6d4733fa687d3eb47b1f492a7abf83962e9f447948edbc0c212a82b9497e8e983fa4d9bdad5487ce2541809186c049a55806853dd1748e634f1a855de40e63433", @typed={0x8, 0x96, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x65, 0x46, 0x0, 0x1, [@typed={0x9, 0xe, 0x0, 0x0, @str=']#+*\x00'}, @generic="1929b464d86406aa575605abedf82417d7205037cc75a1968d1bb004a214088c1c5df6e118d6dc166c98e9596ff4322f403e92a60d24bff5b4d2d6d2b6ceab00b91cb648d49199506ced203e5948a89b", @generic="fdeec462fc"]}, @nested={0x23d, 0x67, 0x0, 0x1, [@generic="9206b1d786fdcd436a9ae04083215510011a3ddb236e2d226f", @generic="7b967bd377eb1c22fab354f83b6e14118753099d70c263203f03bbc0efcfdd3af1e6d36af1504a0e6399f318160ab1ce12ca0138cdb427a0fad3ec6a8ec50c67edf6ab91daf0a03d61d166d358b6132da619da57f2e34f3ac2117071a1ef785da59cf1a4f6566eb24a82f4a49ed759bac5e9897202e216bd53dd02b342848865ee1fb5c82966c70c79d625c09e9c75795a1360f6f35e5266715906b27a52f7980411cae1d202ba75643258f8e298a589610ffa5820220cccd99372", @generic="432c0ef187b3075fd48a25acac6bccc557ba3be287ecb62a322646fb1aa66699e300f7e6fd71ac1b8f98707c785ab6ace2dc2e1970eedc0dbbbf9fd31beddeaf19f4e0335340c90a5614c436beefc786c03a5ef1e0bfacad4ee781de82aef08f6efa4f2576dbb0eb95b34acab25f8653cabce9a081d5", @generic="9d04ca307eac533c289cddd218635a1273", @generic="9f544e96d272a9ad3cb8e15d0c111ca359b9fc3a0a01195981dfc6cf97ebb7a3181d9a29da469ae48533d21730c4f2ae883b86c0dcb4128464484a5ff9116ce71a20471fdde5577392e0714dfcfd212c040185d1a82c3309670c2a3e5fc90f201483d65fe37920179b28f0d5564e468da2d14f51b15e", @generic="daddfff115191251f3f3d61807fd03a2b900ec28db3fd561cfa52a5e6593398c98a423563d1d1b6bdd330f85968402ad764e2f98248cda6f3cce82bff29ab25a484c01edeee011ae93ecd4d8ea95062a137fd802147d5374389b185a8bcbdf01fd06f6f68268d987"]}]}, 0x74c}, {&(0x7f0000000c80)={0x2d4, 0x19, 0x300, 0x70bd2b, 0x25dfdbfd, "", [@typed={0xe, 0x63, 0x0, 0x0, @str='&\x0f}&{[&.\v\x00'}, @nested={0xf2, 0x35, 0x0, 0x1, [@generic="d57ee07bcab80bc493ec55d2a7b64a521870ea5accfdd775e02cae0cd491e84d8381afaece64f584ba15b277c2078bfc4b5c6501703a80c103fc33057f6ac50ef197a220d842eb2b792a09169ae8254c4bf09a53cf17cc55d57b59c538bcc62d09810c65ff010074fe441f8472c6892ceaeb0a94b043d096bdd4cb13966166d4b030c494ca7d85bc07e157e3ceecf3d37c5418db8161dbc424d718e2ca71490d8ae70afeafc1e9203a8f55533d12b8962b302c3cf19c0e402090df4bb7f41b0f987088177b52047605e29d12f147269621976a416bb6", @typed={0x5, 0x19, 0x0, 0x0, @str='\x00'}, @generic="846cd06d680449ad2ad375bc85374215"]}, @typed={0x8, 0x31, 0x0, 0x0, @ipv4=@empty}, @generic="b2b7bebb43f0fda0e61be445fb36b718d015f1af79ceadac2ae3dff4439c2bc476ff20b682cda12fe08dc0cb71bdae80f51fb4911b886bc31af350b914529d5c2dd67a9f64f0f8e009c8671287cb26b23907be291f4c6d96abe9abbfb632ed9cf4593e1cab4fa69e567d0a862b0502facfed4bb87b2d9657294ad4a4d058546c1cb84533aefc8fc4868712db581f560b5992b6961855cdb07b462ef493b2ceb8fbef1fdfce14030e7610e53e8522b8c564eebbe6769f513a4e87695a0d08ec73301575d0baa2915ec808ada355c1404487a18fada3a16ee2228558217d6453d81f0a6c0bfac946", @typed={0x8, 0x28, 0x0, 0x0, @uid}, @nested={0x9, 0x25, 0x0, 0x1, [@generic="4a51c6585b"]}, @generic="bfcb898ef675", @generic="417eb6b653974f44ad9060e49d4d014de260c500b128ac5dce89670e33a8f57633384d27df50867c8eb77dbf48e5ccaeaa298df731a8399830489894a43ac676c084921f1e4b5e13070caf75737165de8105b6a9962b12194a012ecf05f9d2284d054c6e7cafc017ac47af52437879f2bc2abb0e24925b50a02237b0f9bcee2667a66055c6839881156f2c9ebc64a1bd4acf1546c1e8884a11c027dba6fb1d841bdc0fe63efa21fd", @nested={0xc, 0x40, 0x0, 0x1, [@typed={0x8, 0x4f, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x2d4}, {&(0x7f00000031c0)={0x1c, 0x17, 0x1, 0x70bd29, 0x25dfdbfe, "", [@nested={0xc, 0x7f, 0x0, 0x1, [@typed={0x8, 0x54, 0x0, 0x0, @pid}]}]}, 0x1c}, {&(0x7f0000003200)={0x1ac, 0x14, 0x1, 0x70bd2c, 0x25dfdbff, "", [@nested={0x19c, 0x14, 0x0, 0x1, [@generic="3661d8cbdbae3b94e50de3d060c2ee89271ac19ba0f19df7efceb9e720ec35d288d4984beb2afb4da7f68ecb78ae847ca34fddd32b4c99740225633aeb41f4f1eb30a1dcae06fbb3871a8808057e11e27984775ad3c553d94935372b49801d23b4520189d26e2699092af29a6ccbfa841a10e1a2f25716ca3f27f4c1ac19a6b4c730bfdeaa3db4c562c6606ce3e9c41a683add7a56b2b7b23e8e16a9e52154328aec8b1e768bee9be96ba467d2c918018b322d7fc8", @generic="18ca548c7c5a5519a7c36b71fb678e45d770a78059fec980c604f0e8a36c08f57f76b79d7f03ef5a75dde57932514b1b2b495c1d25a41a11bf89dd5a76456f01f08761ac22f31fbe138079eb58911c5beb0335b00eb3a7be6cb42121b0a85ce5bd730414789a5a1fd1bfaf66d666685e7c82edd7337f003dde38490cbd50087d525e9f24f78bc8ce7ed21fe3ccfd75e7794f94dfeaac58a1389b83e45428f8b7dd4228ad9a61cfb104b1347017c2ecbb80a98afdaee1013292e1f1beee742b71681f70b383f4150b4542ec879d0fdc31a64f0d33bbcd178b9d27b12f813479faa99974"]}]}, 0x1ac}], 0x8, &(0x7f0000003440)=[@rights={{0x1c, 0x1, 0x1, [r0, r3, 0xffffffffffffffff]}}], 0x20, 0x10}, 0x40) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc0605345, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) fstat(0xffffffffffffffff, &(0x7f0000001140)) 08:29:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000294fc266f153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000055aa060000000000000000", 0x20, 0x1dd}, {&(0x7f0000010200)="0000000072724161450000001a000000", 0x10, 0x3e0}, {0x0}, {&(0x7f0000000140)="f8ffff0fffffff0ff8", 0x9, 0x4000}], 0x0, &(0x7f0000011100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) faccessat(r1, &(0x7f00000000c0)='./file0\x00', 0x44) chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x200100, 0x16d) 08:29:47 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:29:47 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:29:47 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:29:47 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) fallocate(r4, 0x15, 0x6, 0x1f) sendfile(r2, r3, 0x0, 0x10000027f) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:29:48 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:29:48 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:29:48 executing program 3: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 08:29:48 executing program 4: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:29:48 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:29:48 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:29:48 executing program 3: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 08:29:48 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) [ 326.199683] 9pnet_fd: p9_fd_create_tcp (4695): problem connecting socket to 127.0.0.1 [ 326.371714] 9pnet_fd: p9_fd_create_tcp (4687): problem connecting socket to 127.0.0.1 08:30:08 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000340)=""/86, 0x56}, {&(0x7f00000003c0)=""/76, 0x4c}], 0x2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x4c340, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r3, 0xc0403d08, &(0x7f0000000500)) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) syncfs(0xffffffffffffffff) io_setup(0x20, &(0x7f0000000000)=0x0) io_submit(r4, 0x1, &(0x7f00000004c0)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3e}]) fcntl$dupfd(r2, 0x0, r0) 08:30:08 executing program 4: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:30:08 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) fallocate(r4, 0x15, 0x6, 0x1f) sendfile(r2, r3, 0x0, 0x10000027f) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:30:08 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:30:08 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:30:08 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:30:08 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) lseek(r2, 0x0, 0x3) 08:30:08 executing program 6: openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4) finit_module(r1, &(0x7f0000000540)='/dev/sr0\x00', 0x2) r2 = inotify_init() ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x6, {0x0, 0x7fff, 0x8, 0x1, 0x1ff}}) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000080)={{'\x00', 0x2}, {0x9}, 0x108, 0x0, 0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000000)='./file2\x00', &(0x7f0000000140)="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", 0x1f3, 0x0, &(0x7f0000000840)={0x2, 0xeb, {0x1, 0xc, 0x8f, "c71ab7e79c77a58de35abe0e629dbe011a1071ae8cecfc6220ae59a30d4f7248ab12d1dff2e6f68cc640890970012dacafd0686efed80268c57c157681b818206e28b9d960f86b74d9b9d3fb0853ba07e99b6e4268c4c380fd0bdfd96b7702d5cf42ad042ae3ba55052c3e8180163c4c92a5aac9e7311bb52f06bc4ce8cf394e7f20acb2e64a2100feb87a7c00bdc3", 0x4f, "462ea9c72995acc12f7cb783c6d6e8c59a4086ad3505d55358df44b5ac1170c1d43fd70e0bd18de626e36b31fd43e94c93fb656e34f7836182908a6db1db31fa8ed4cee428378410adcc48ec72703b"}, 0x1e3, "3bda044ba9bfe3d2b4889b23d68b6a2a603806000000812a2b7b5f2fce4ded9a57404eb6fa4dbac444ae1bee0e38ae1cedebe7246f19499517ccc52908b50f94b080b9b65573ed34f08a30d6e5cb082fbed7195d555fce1da59b96bd1af4aa557ff029b377dbc00d5e86250a62dea571c69218f39ed2f2d0c88a6b87f43a3821537ea6ec802c132130078a1e742c613dd6c0b8777077c8caef26f9e2e8989c3a23ae24978a8f5b326fd65793ada2163ce605ed6c809504dad90fee19c715b02affd42cac33a9759093fc52c573a2d2a76ec05d71f27587707ada646313ba3b226a7ab87bf2c861f2694fec5be1488c7e27e5d97674783e599e20a43e014af4a34727d2b591f1dff8dab655cbc244620c1f35028bbb5cac3916184cb95d679c1b94ae5c6382cd537a60a9e5ed001d903760ea96787ce6282a890f4aa9cfe06ba24ea0db6cc43ea3615aec195cfd671300000000000000000000000000005c2fd9b4abe2df0c869e217865633f00c98fb7a2e1e2db7d12691a515954ea9e3753cb46e492e97282274e845ffd7df16ee9d6d887d449096dde857809088e06f7961280d0f1bd8621de88c3c3fb7955d7cc52797726ff4d04121d04e54945bab2736ee44822494ee5ea7836b1ae8664b55a8f9edddc180a4fa71850a939e773ef886739cf05"}, 0x2da}) r3 = openat2(r0, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380)={0x48040, 0x4c}, 0x18) openat(r3, &(0x7f00000003c0)='./file0/file0\x00', 0x480c03, 0x10) 08:30:08 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) lseek(r2, 0x0, 0x3) 08:30:09 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:30:09 executing program 3: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)="046556147e7bde4b2b64c669fe3f08ed98ccb3584687183bbe6d13274251b59bcb", 0x21}, 0x1, 0x0, 0x0, 0x1}, 0x840) r0 = memfd_secret(0x80000) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000000c0)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000000)='sched\x00') r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x434c1, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffa}, 0xe804, 0x8, 0xf523, 0x4, 0x0, 0x1, 0x0, 0x0, 0x800001, 0x0, 0x283}, r1, 0xfffffffffffffffc, r2, 0x3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) syz_open_procfs(r3, &(0x7f0000000000)='sched\x00') perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x3, 0x2, 0x0, 0x23, 0x0, 0x4, 0x20054, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffffa, 0x4, @perf_config_ext={0x0, 0xfffffffffffffc00}, 0x820, 0x2, 0xfef7, 0x6, 0x401, 0x101, 0x0, 0x0, 0x4, 0x0, 0x6}, r3, 0x10, 0xffffffffffffffff, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000340)) 08:30:09 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:30:09 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) fallocate(r4, 0x15, 0x6, 0x1f) sendfile(r2, r3, 0x0, 0x10000027f) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:30:26 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:30:26 executing program 1: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x0, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x81, 0x90, 0x6, 0xc7, 0x0, 0x1000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x3) 08:30:26 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:30:26 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) fallocate(r4, 0x15, 0x6, 0x1f) sendfile(r2, r3, 0x0, 0x10000027f) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:30:26 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:30:26 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef) io_setup(0x9, &(0x7f0000000140)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x591842, 0x1d8) sendfile(r5, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r6, r5, 0x0, 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r3, {0xee00, 0xee01}}, './file1\x00'}) io_submit(r4, 0x9, &(0x7f0000000e00)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x3, 0xffffffffffffffff, &(0x7f00000003c0)="acc0e44d6cb60e039d4f0b39518a43564a7caef23cf8825417442e205a7044b52f8029c8d935ada1194bcd966f5d7ff7afdc775f60499294716547b8b86b9213008504e85698c851ffb69e5d1626a106c27871216b89a3241244090e0931b3a4e96c6e952fa6da54f6ff2f32e873aa01f5aa8f24f5f21870b54151bda64ca9082d3e5034ffb666af92beb52a4e4533d3587df829de8a6e5f7e36b709e0ecf800729ef78198b3597a4b390dc0ba2446ad9075fa2542", 0xb5, 0x9, 0x0, 0x1, r0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x101, 0xffffffffffffffff, &(0x7f0000000600)="18ef4baf045d67e6755ccaa971cfa7f85386ffbc0c29682ef3de5ce4fe13c512d5a660854f6a60960b7c1eadc2f22042f25246e6e5946384028541463e9c0de62a2c312af3c9d1c17c1f3f9ae29f45a489bef69e260174255ef9a6dc104731dbddb118d7a020145c2f04f981d6b03f7e25a3629ef29e303ef2d71ce0ce9e1c5c4131399b4af3183801ca11720307e5ad4ccb8e828d0a91ada10e51465cd250b5", 0xa0, 0x9}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x2, 0xd2, r0, &(0x7f00000006c0)="27d85ec86984ad08ee4d9bbdea814668db11204aeaa181a8b2de03347ffb5efe36b6bf7deb6afcbce4879a6b57dcbb94285a848cf877bd43d6e0a181a0ecc58c1ef03040d75e09d3ce0fb71b85e0842368a1f4db5bc84feb2c", 0x59, 0x80, 0x0, 0x3}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x7, 0xffff, r2, &(0x7f0000000740)="3508d13ed0621cf39edbe1f70fe855c8730f0d1e260a8d0ac395f98e2a110981a625316303c2ccafb5f5acced080a7b39649e0a8a28df6759dd06fd4ba85a4bb41eb0b70a78743dbced5c17f6f5fe680cd232c965d9e43e7158961f0ab93829b8689729e944e785c60d12f8803d9cd82696dfe2b08a9abe1242e066e4a5c", 0x7e, 0x6, 0x0, 0x2}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000840)="33a62663769a388c56b20f23a688480defc5846f95a2a253338b7382a8fc85727235ebe584090e29decbc577377a45ebc2ca114ac2b5f295e7bab0ffa05e26476a57a938e991788d01b49ed01271555acd04b547b54d386ac8b5af04fb0a674d3d3b4d2ed21a9c9b262ba0e2aec85ec6587fc154af96af688a39c03e9983bad771ad7b4b26f201faf3c4f440f01ba07927c3d1aee934bf94541b20b5e6d06bf5df3ef241b712e55557d300139e1721ecaed7f71bfd7d01313f5fc768e4439fddff6d76e9cb54fb85ad05d47239d9b13e2915ffdc9f62648c6396630a10973f0df7c785cffcf9c16660f01f82b7", 0xed, 0x8, 0x0, 0x2}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x5, 0x2, 0xffffffffffffffff, &(0x7f0000000980)="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", 0xfd, 0x2, 0x0, 0x0, r5}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x7, 0x8001, r7, &(0x7f0000000b00)="f269d0c82d07f9b71be22f3e4564b5f8dcb2363a402734a235357f7f36a48f8f8f4144fcf299a7631d83d76384e5d859ab0a9609c63bebe730d06276da013c3d2bbb0cd14cd789eef99111bccfad91c29770ef6c2bbd837a8f663e181037ed04ab8081c71dbf94aef402e7952b568e1a7489f7f93cabec3afc88becb6ca0d437fcde6ff9477c6c12bf202bd3d902321b38ba8aad15ac003a92d7113b6f06fac75804c197b93f806b6c697a1111a3945d89f13ea1a6365eee198bad19510cf2d7dfab0cf9b4ff476858ad89ea6120c518d0d19f90ff44e0fda7d9f8643d9e3c21c9ad99e9662c6f53f0f4277217cfd23022a3358fbaa2", 0xf6, 0x9, 0x0, 0x1, r1}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x3, 0x5, r3, &(0x7f0000000c40)="237038105cd0", 0x6, 0x1f, 0x0, 0x3, r1}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x8, 0x1, r1, &(0x7f0000000cc0)="a18baf44dc10341c2e75d726ba94795273f8dd2b71131f9108ce569e405390a669d41eef5278d637429eeddfe76a6d7930ac7d57106c7ee0833f6f4fef88fbe515cd3bc2cd9f0139a6f25a1218173822c1b8db974b74499a7a841b9b7f37949a687b61a2ae819e6d233306276e39bdb87b1a8328ec6627e2098167af031fc53f944b9f36bb93a327009b58d0f3e1384c56383282a64c17c293f48101222ecf57364da375e4cd0dd3e716700575742c36ced78938854f4d0c890b37175d31440eaf34abc5e90d179359432c4a22863e72170d2848f02f68e06cf39072a6", 0xdd, 0x5, 0x0, 0x2, r1}]) r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) r9 = dup2(r8, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r9, 0x40042409, 0x0) io_submit(r4, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r8, &(0x7f0000000000)=')', 0x1}]) clock_gettime(0x0, &(0x7f0000000180)) io_getevents(r4, 0x400, 0x5, &(0x7f00000001c0)=[{}, {}, {}, {}, {}], &(0x7f0000000040)={0x0, 0x989680}) 08:30:26 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001a00019c00ba664b3c27b57780"], 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x6, 0x4, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x0, 0x700, 0x0, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x80, 0x10001, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x1, 0x20, 0x8, 0xffffff49}}) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) recvfrom(r2, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x0, 0x0, 0x37) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', r3, 0x29, 0x0, 0x6, 0x4, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x0, 0x700, 0x0, 0x10001}}) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) recvfrom(r4, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x0, 0x0, 0x37) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', r5, 0x29, 0x0, 0x6, 0x4, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x0, 0x700, 0x0, 0x10001}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000b40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="c4050000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="ccc42d2a08008100", @ANYRES32, @ANYBLOB="fc00028038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040000000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400f8ffffff08000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400d217000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001000100080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="ec00028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000400000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040001fcffff08000100", @ANYRES32=0x0, @ANYBLOB="6c01028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c000400930a27000400000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000500000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff7f000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400070000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000600000008000100", @ANYRES32=r1, @ANYBLOB="680102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000200000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000400000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ff090000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000900000008000600", @ANYRES32=r5, @ANYRESHEX=r2, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7c00028838000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400000000004000010024000100706f72745f6d617070696e67000000000000050003000300000008000400"/112, @ANYRES32, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x5c4}, 0x1, 0x0, 0x0, 0x11}, 0x40) 08:30:26 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) lseek(r2, 0x0, 0x3) [ 363.744661] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 363.788469] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 363.789190] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 363.789694] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 363.790201] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 363.790796] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 363.794616] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 363.795161] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 363.795794] Buffer I/O error on dev sr0, logical block 0, async page read [ 363.796494] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 363.796916] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 363.797554] Buffer I/O error on dev sr0, logical block 1, async page read [ 363.798532] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 363.798995] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 363.799636] Buffer I/O error on dev sr0, logical block 2, async page read [ 363.800282] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 363.800695] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 363.801341] Buffer I/O error on dev sr0, logical block 3, async page read [ 363.802048] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 363.802469] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 363.803137] Buffer I/O error on dev sr0, logical block 4, async page read [ 363.803796] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 363.804211] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 363.804860] Buffer I/O error on dev sr0, logical block 5, async page read [ 363.805469] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 363.805922] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 363.806557] Buffer I/O error on dev sr0, logical block 6, async page read [ 363.807183] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 363.807592] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 363.808229] Buffer I/O error on dev sr0, logical block 7, async page read 08:30:26 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x9, &(0x7f0000000140)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_pgetevents(r0, 0x200, 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000300), &(0x7f00000003c0)={&(0x7f0000000340)={[0x7]}, 0x8}) r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000004c0), 0x2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) io_submit(r0, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000001c0)=')', 0x1}]) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') io_getevents(r0, 0x0, 0x2, &(0x7f0000000440)=[{}, {}], &(0x7f0000000480)={0x0, 0x989680}) ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f0000000180)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000500)={0x3, 0xfffffeff, 0x5, 0x1, 0x4597, 0xd8}) openat(r1, &(0x7f0000000400)='./file1\x00', 0x400, 0x108) write$cgroup_subtree(r4, &(0x7f0000000200)={[{0x2b, 'freezer'}, {0x2b, 'cpuacct'}, {0x77, 'net'}, {0x2b, 'memory'}, {0x0, 'freezer'}, {0x2d, 'rdma'}, {0x2d, 'hugetlb'}, {0x2d, 'net'}, {0x2b, 'pids'}, {0x2b, 'perf_event'}]}, 0x4e) [ 363.869610] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 363.870368] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 363.870997] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 363.871486] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 363.872074] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 2 08:30:26 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) 08:30:26 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000540)={0x4, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0xfffffffe, {{0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x4, @remote}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 08:30:26 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:30:27 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) syz_open_dev$tty20(0xc, 0x4, 0x1) syncfs(0xffffffffffffffff) io_setup(0x20, &(0x7f0000000000)=0x0) io_submit(r4, 0x1, &(0x7f00000004c0)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3e}]) fcntl$dupfd(r3, 0x0, r0) 08:30:27 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) 08:30:27 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@dev, 0x80000, 0x0, 0xff, 0x9}, 0xfffffffffffffee9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@dev, 0x80000, 0x0, 0xff}, 0x20) fcntl$getflags(r0, 0xb) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback}, &(0x7f0000000080)=0x20) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 364.153629] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 364.154610] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 364.155165] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 364.155666] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 364.174348] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 364.174914] Buffer I/O error on dev sr0, logical block 0, async page read [ 364.185176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 364.185603] Buffer I/O error on dev sr0, logical block 1, async page read [ 364.192296] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 364.195618] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 364.198771] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 364.201053] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 364.203770] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 364.207056] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 08:30:27 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:30:27 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) 08:30:42 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) fallocate(r3, 0x15, 0x6, 0x1f) sendfile(r1, r2, 0x0, 0x10000027f) 08:30:42 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:30:42 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:30:42 executing program 4: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:30:42 executing program 6: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:30:42 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:30:42 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x9, &(0x7f0000000140)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_pgetevents(r0, 0x200, 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000300), &(0x7f00000003c0)={&(0x7f0000000340)={[0x7]}, 0x8}) r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000004c0), 0x2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) io_submit(r0, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000001c0)=')', 0x1}]) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') io_getevents(r0, 0x0, 0x2, &(0x7f0000000440)=[{}, {}], &(0x7f0000000480)={0x0, 0x989680}) ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f0000000180)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000500)={0x3, 0xfffffeff, 0x5, 0x1, 0x4597, 0xd8}) openat(r1, &(0x7f0000000400)='./file1\x00', 0x400, 0x108) write$cgroup_subtree(r4, &(0x7f0000000200)={[{0x2b, 'freezer'}, {0x2b, 'cpuacct'}, {0x77, 'net'}, {0x2b, 'memory'}, {0x0, 'freezer'}, {0x2d, 'rdma'}, {0x2d, 'hugetlb'}, {0x2d, 'net'}, {0x2b, 'pids'}, {0x2b, 'perf_event'}]}, 0x4e) 08:30:42 executing program 1: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x0, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x81, 0x90, 0x6, 0xc7, 0x0, 0x1000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x3) [ 379.714460] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 379.715309] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 379.715993] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 379.716583] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 379.717303] blk_print_req_error: 9 callbacks suppressed [ 379.717312] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 2 [ 379.733275] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 379.733707] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 379.734762] buffer_io_error: 6 callbacks suppressed [ 379.734769] Buffer I/O error on dev sr0, logical block 0, async page read [ 379.736377] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 379.737073] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 379.737742] Buffer I/O error on dev sr0, logical block 1, async page read [ 379.743291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 379.743756] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 379.744411] Buffer I/O error on dev sr0, logical block 2, async page read [ 379.745550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 379.746004] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 379.746649] Buffer I/O error on dev sr0, logical block 3, async page read [ 379.749219] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 379.749666] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 379.751003] Buffer I/O error on dev sr0, logical block 4, async page read [ 379.753770] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 379.754221] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 379.754862] Buffer I/O error on dev sr0, logical block 5, async page read 08:30:42 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:30:42 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:30:42 executing program 6: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:30:42 executing program 4: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) [ 379.928350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 379.928997] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 379.929889] Buffer I/O error on dev sr0, logical block 6, async page read [ 379.949321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 379.949854] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 379.950501] Buffer I/O error on dev sr0, logical block 7, async page read 08:30:43 executing program 1: perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x2000000, 0x7}, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb1af3e0dd6a380e71c4fcf7eb3843a0a27d26af18e26c51db155af69e0000000000000000000000000000df63a36fd407eb99643b749f82e446ef63c21499fc9022822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee12eb8459bf1b75803ac062baa94cd7dfdf5af4315b56bc0b876e61fa3a5d8f3ac20a51e8f575c1d589000"/215], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) pwritev2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001fc0)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000000c0)="2a4999f1ced3a04d3e945455e6cab8493379abc3d5c2d89b792050158475106b14ac9b07e08fb2384b519262b6", 0x2d}, {&(0x7f0000000140)="e9", 0x1}, {0x0}], 0x3, 0xfffffffffffffffc}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}], 0x40, 0x20040401}}], 0x2, 0x0) 08:30:43 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x9, &(0x7f0000000140)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_pgetevents(r0, 0x200, 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000300), &(0x7f00000003c0)={&(0x7f0000000340)={[0x7]}, 0x8}) r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000004c0), 0x2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) io_submit(r0, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000001c0)=')', 0x1}]) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') io_getevents(r0, 0x0, 0x2, &(0x7f0000000440)=[{}, {}], &(0x7f0000000480)={0x0, 0x989680}) ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f0000000180)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000500)={0x3, 0xfffffeff, 0x5, 0x1, 0x4597, 0xd8}) openat(r1, &(0x7f0000000400)='./file1\x00', 0x400, 0x108) write$cgroup_subtree(r4, &(0x7f0000000200)={[{0x2b, 'freezer'}, {0x2b, 'cpuacct'}, {0x77, 'net'}, {0x2b, 'memory'}, {0x0, 'freezer'}, {0x2d, 'rdma'}, {0x2d, 'hugetlb'}, {0x2d, 'net'}, {0x2b, 'pids'}, {0x2b, 'perf_event'}]}, 0x4e) 08:30:43 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:30:43 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:30:43 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:30:43 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) fallocate(r3, 0x15, 0x6, 0x1f) sendfile(r1, r2, 0x0, 0x10000027f) 08:30:57 executing program 6: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) fallocate(r3, 0x15, 0x6, 0x1f) sendfile(r1, r2, 0x0, 0x10000027f) 08:30:57 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:30:57 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:30:57 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:30:57 executing program 3: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) fallocate(r3, 0x15, 0x6, 0x1f) sendfile(r1, r2, 0x0, 0x10000027f) 08:30:57 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) fallocate(r3, 0x15, 0x6, 0x1f) sendfile(r1, r2, 0x0, 0x10000027f) 08:30:57 executing program 4: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:30:57 executing program 1: perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x2000000, 0x7}, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb1af3e0dd6a380e71c4fcf7eb3843a0a27d26af18e26c51db155af69e0000000000000000000000000000df63a36fd407eb99643b749f82e446ef63c21499fc9022822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee12eb8459bf1b75803ac062baa94cd7dfdf5af4315b56bc0b876e61fa3a5d8f3ac20a51e8f575c1d589000"/215], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) pwritev2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001fc0)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000000c0)="2a4999f1ced3a04d3e945455e6cab8493379abc3d5c2d89b792050158475106b14ac9b07e08fb2384b519262b6", 0x2d}, {&(0x7f0000000140)="e9", 0x1}, {0x0}], 0x3, 0xfffffffffffffffc}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}], 0x40, 0x20040401}}], 0x2, 0x0) 08:30:57 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:30:57 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:31:12 executing program 1: perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x2000000, 0x7}, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb1af3e0dd6a380e71c4fcf7eb3843a0a27d26af18e26c51db155af69e0000000000000000000000000000df63a36fd407eb99643b749f82e446ef63c21499fc9022822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee12eb8459bf1b75803ac062baa94cd7dfdf5af4315b56bc0b876e61fa3a5d8f3ac20a51e8f575c1d589000"/215], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) pwritev2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001fc0)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000000c0)="2a4999f1ced3a04d3e945455e6cab8493379abc3d5c2d89b792050158475106b14ac9b07e08fb2384b519262b6", 0x2d}, {&(0x7f0000000140)="e9", 0x1}, {0x0}], 0x3, 0xfffffffffffffffc}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}], 0x40, 0x20040401}}], 0x2, 0x0) 08:31:12 executing program 6: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) fallocate(r3, 0x15, 0x6, 0x1f) sendfile(r1, r2, 0x0, 0x10000027f) 08:31:12 executing program 3: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) fallocate(r3, 0x15, 0x6, 0x1f) sendfile(r1, r2, 0x0, 0x10000027f) 08:31:12 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) fallocate(r2, 0x15, 0x6, 0x1f) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:31:12 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:31:12 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:31:12 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:31:12 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:31:12 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:31:27 executing program 1: perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x2000000, 0x7}, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb1af3e0dd6a380e71c4fcf7eb3843a0a27d26af18e26c51db155af69e0000000000000000000000000000df63a36fd407eb99643b749f82e446ef63c21499fc9022822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee12eb8459bf1b75803ac062baa94cd7dfdf5af4315b56bc0b876e61fa3a5d8f3ac20a51e8f575c1d589000"/215], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) pwritev2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001fc0)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000000c0)="2a4999f1ced3a04d3e945455e6cab8493379abc3d5c2d89b792050158475106b14ac9b07e08fb2384b519262b6", 0x2d}, {&(0x7f0000000140)="e9", 0x1}, {0x0}], 0x3, 0xfffffffffffffffc}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}], 0x40, 0x20040401}}], 0x2, 0x0) 08:31:27 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x2, 0x3, 0x20, 0xfffffa57}]}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x8, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x9, 0x9, 0x5, 0x3f}, {0x26db, 0x81, 0x2, 0x3f}, {0x3, 0x6, 0x4, 0xff}, {0x8000, 0x3, 0x81, 0x8}, {0x7, 0xda, 0x5, 0x80000001}]}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000300)={0x9, &(0x7f0000000280)=[{0x0, 0x6, 0x0, 0x4}, {0xfffd, 0x1, 0x3, 0xfff}, {0x7, 0x81, 0x4, 0x1f}, {0x2cf, 0x80, 0x3, 0x20}, {0x8001, 0x1, 0x1, 0x10001}, {0x0, 0x20, 0x3, 0x69}, {0x4, 0xc, 0x1f, 0x6}, {0x31, 0xff, 0x0, 0x2}, {0x7fff, 0xfb, 0x0, 0x7}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'lo\x00'}) sendfile(r2, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) openat(r2, &(0x7f0000000180)='./file1\x00', 0x100, 0xa8) sendfile(r3, r2, 0x0, 0xfffffdef) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f00000000c0)=[{0x0, 0x0, 0x40, 0xb6}, {0x80, 0x5, 0x3f, 0x81}, {0x8001, 0x9, 0x8, 0x4}, {0x3, 0x9, 0x9, 0xf}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000001780)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 08:31:27 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:31:27 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) 08:31:27 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) fallocate(r2, 0x15, 0x6, 0x1f) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:31:27 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:31:27 executing program 6: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) fallocate(r2, 0x15, 0x6, 0x1f) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:31:27 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:31:27 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000080)='./file1\x00', 0x8) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ip6erspan0\x00'}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) 08:31:27 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) 08:31:28 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:31:28 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) recvmmsg$unix(r0, &(0x7f0000001580)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000000200)=""/108, 0x6c}, {&(0x7f0000000000)=""/22, 0x16}, {&(0x7f0000000280)=""/203, 0xcb}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/167, 0xa7}, {&(0x7f0000000080)=""/60, 0x3c}], 0x6, &(0x7f00000014c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}], 0x1, 0x40000021, &(0x7f00000015c0)={0x0, 0x989680}) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x8021, 0x0) chmod(&(0x7f0000001a00)='./file1\x00', 0x0) 08:31:28 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:31:28 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) 08:31:28 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:31:28 executing program 3: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) fallocate(r2, 0x15, 0x6, 0x1f) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:31:28 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:31:42 executing program 4: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:31:42 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:31:42 executing program 6: preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x4000) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x100, 0x52) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x41030) 08:31:42 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:31:42 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:31:42 executing program 3: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) fallocate(r2, 0x15, 0x6, 0x1f) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:31:42 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:31:42 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:31:42 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:31:42 executing program 4: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:31:42 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xffff, r0, &(0x7f00000003c0)="1b7a1666851945cd80a5a2ac0000000000000000b2122fbfdce63a77a865f0778bd425e749feed51f1439746599f0422a9d32dcef6b20d00ce737d913518a188cb9ad737a3f10ee2333baed5899c00ab0d1cce9ff265d634b3b2996ff3a5a91a9283b3b8cbfac984eccdb937f1d200bf96b5b75d5da9e818e348b4", 0x7b, 0x8}]) r3 = eventfd2(0x7, 0x0) sendfile(r2, r3, &(0x7f0000000340)=0x5, 0x400) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r2) openat(r2, &(0x7f0000000480)='./file2\x00', 0x101042, 0x19b) write(r5, &(0x7f0000000080)="01", 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x82040, 0xa) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$packet(0x11, 0x3, 0x300) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000300)={0x7, 0x5}) read$hiddev(r4, &(0x7f0000000040)=""/169, 0x200000e9) 08:31:42 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1b) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) fspick(r0, &(0x7f0000000140)='./file0\x00', 0x0) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="90000000eadfd9107efe0600033726abdb53857cb50c", @ANYRES16=0x0, @ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0x22000850}, 0x4040) 08:31:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) dup2(r0, r2) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000014c0)={0x1c, 0x58, 0x1, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}]}, 0x1c}], 0x1}, 0x0) 08:31:42 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:31:42 executing program 6: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="85"]) fork() syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 08:31:42 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:31:43 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:31:43 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:31:43 executing program 1: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:31:43 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:31:43 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:31:43 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:31:43 executing program 4: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:31:43 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:31:43 executing program 6: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:31:43 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:31:59 executing program 1: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:31:59 executing program 6: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:31:59 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:31:59 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:31:59 executing program 4: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:31:59 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:31:59 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:31:59 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:31:59 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:31:59 executing program 1: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:31:59 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:31:59 executing program 6: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:31:59 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:31:59 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:31:59 executing program 4: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:32:00 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:32:00 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x71b, 0x0, 0x0, 0x2004020, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x2, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000180)=ANY=[@ANYBLOB="6ddf10c7d0a4d963e9dd1c4d9e2d152c4b6f64653d3030303030303030303030303030300800303009c626862ce9327c82726de8c8354e80a6bc7ca5646c498993f310a534ee16463794ee7a9733832c0117b6a1e84fad7c48a8d636ca6ae5f2aac2e102becc7e0fecc487eeddc6193a9584ee585b872edf641ca6deda0620c713a6c2cee9f9c327a50f9098290a8f97a2830547c38db465ce85539d493c54f9032143ccb6b0226c2e694e7c9be15704029619bedf5a64e8886a8fcd9578a8"]) 08:32:00 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x9, &(0x7f0000000140)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r0, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfffe, r1, 0x0}]) r2 = dup(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') socket$nl_generic(0x10, 0x3, 0x10) r3 = accept$unix(r2, 0x0, &(0x7f00000001c0)) preadv(r3, &(0x7f0000001900)=[{&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000300)=""/128, 0x80}, {&(0x7f00000004c0)=""/153, 0x99}, {&(0x7f0000000600)=""/135, 0x87}, {&(0x7f0000001740)=""/68, 0x44}, {&(0x7f00000017c0)=""/110, 0x6e}, {&(0x7f0000000240)=""/57, 0x39}, {&(0x7f0000001840)=""/173, 0xad}, {&(0x7f0000000580)=""/44, 0x2c}], 0xa, 0x40, 0x3) pread64(r3, &(0x7f0000000200)=""/27, 0x1b, 0xf2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x5, 0x8, 0x2, 0x3f, 0x0, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ff, 0x1, @perf_bp={&(0x7f0000000180), 0x1}, 0x9092, 0x1, 0xc21, 0x5, 0x3, 0xfffffffb, 0x7, 0x0, 0x89, 0x0, 0x4}, 0x0, 0x4, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') [ 457.249619] hugetlbfs: Unknown parameter 'mßÇФÙcéÝMž-' [ 457.256657] hugetlbfs: Unknown parameter 'mßÇФÙcéÝMž-' 08:32:15 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:32:15 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:32:15 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:32:15 executing program 4: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:32:15 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:32:15 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x80000000, 0x2, &(0x7f0000000680)=[{&(0x7f00000004c0)="15e1ceff11ae4591daa98ec50178fd7c8816bcca7bb1af18596143cad8aa9a428e5970f557cb2e3c64ce6bd6cb2dcf0885ec21d28f34f873d90f376468d0377553f552425a531bae08eb379d4b369ccf43625a0afb25606acaf3149a65aa47da7fd0adf37d121e9ef123bdd08ea74bee7ab14de879834ce87c64963f21255e231d596ce8559f3cf76550b6470f1bf1a4a1c4dec6810b9e6effd864d7267818c24f349cda589c862fde4948d73a", 0xad, 0x329d}, {&(0x7f0000000580)="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", 0xfe}], 0x20000, &(0x7f0000000780)=ANY=[@ANYBLOB="626c6f636b5f76616c69646974792c6a6f75726e616c5f6173796e635f636f6d6d69742c6e6f626c6f636b5f7661b36c69646974712c62736467726f7570732c7374726999243d3078303030303030303030303030303032302c62736467726f7570732c646f6e745f686173682c736d61636b66736465663d666f776e65723e2c657569643e", @ANYRESDEC=0xee01, @ANYBLOB=',context=staff_u,\x00']) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) mount$9p_unix(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x40040, &(0x7f00000003c0)={'trans=unix,', {[{@access_uid={'access', 0x3d, r0}}, {@version_L}, {@version_9p2000}, {@access_any}, {@aname}], [{@fowner_gt={'fowner>', r1}}]}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x8, 0x3) setresuid(r2, r0, r0) rmdir(&(0x7f0000000000)='./file0\x00') socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 08:32:15 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0xc0040, 0x0) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x6000) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x16) mincore(&(0x7f0000ff7000/0x9000)=nil, 0x9000, &(0x7f0000000000)=""/161) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7e00000000}}, './file0\x00'}) r4 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r2) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)="18419cc68448de3ae8f97ea6a46d823d4f19cecbf569a58b79851d91f3da031fecf4dfebf4ac3b13988a048b4e35761cb05a5d5b28e1ca6ceebae02cbbf7e894098749d5f99cb226f14f00b6034bfb02a7a5af409f531820bd319b9d7c3405022b550d32ad368fdbbddb8ed631d1dde9a4ed", 0xff10, r4) 08:32:15 executing program 6: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x48000, 0x100) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001900)=ANY=[@ANYBLOB="54010000100001000000000000000000201100272a0ee9935500000080000000000000000001ac1414bb000000000000000000000000000000200000000000000000b29e00009a12e84c0359749e7db77f77ba7204a0273b6f4c0962ca547448c72191879088fedbd36836b506c53da3bbe4ac69d281719f00"/130, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x154}}, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000012c0)={0x4, 0x80, 0x1, 0xf9, 0xcc, 0x7, 0x0, 0x100, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x80, 0x9}, 0x40002, 0x8, 0x4, 0x1, 0x0, 0x3, 0x3ff, 0x0, 0xce9d, 0x0, 0x5}, r1, 0xb, 0xffffffffffffffff, 0xc) sendfile(r3, r4, &(0x7f0000001340)=0x3, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000001) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0)=[r0, 0xffffffffffffffff], 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = gettid() process_vm_readv(r8, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', &(0x7f0000001280)={0x200000, 0x80}, 0x18) [ 472.185481] loop1: detected capacity change from 0 to 264192 [ 472.190662] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.6'. [ 472.242327] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.6'. 08:32:29 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x4, 0x5, 0x88, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4a1, 0x2, @perf_config_ext={0x9, 0xe2a}, 0x43004, 0x0, 0x2, 0x5, 0x1ff, 0x5, 0x3, 0x0, 0x1, 0x0, 0x400}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x1) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x27) tkill(r0, 0x16) r1 = gettid() syz_open_procfs(r1, &(0x7f0000000180)='net/igmp6\x00') capset(&(0x7f00000000c0)={0x20071026, r0}, &(0x7f0000000040)={0xfffffffc, 0x0, 0x1, 0x0, 0x4, 0x1}) ptrace(0x11, r0) ptrace$setopts(0x4206, r0, 0x0, 0x100034) ptrace(0x11, r0) mount$9p_tcp(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532342c616669643d307830303076d0eea9a27415c630303030302c616669643d3078303030303030303030303030303030342c6163636573733d757365722c6f626a5f747970653d2f70726f632f6c6f636b73002c726f6f74636f6e746578743d757365725f752c6f626a5f747970653d2c726f6f74636f6e746578743d73746166665f752c00"]) 08:32:29 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x193182, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000004c0)={0x10}) signalfd4(r0, &(0x7f0000000180)={[0x7]}, 0x8, 0x800) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x10000000) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r3, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) syz_io_uring_setup(0x5d6f, &(0x7f0000000680)={0x0, 0xbcc0, 0x2, 0x2, 0x273, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000700), &(0x7f0000000740)) syz_io_uring_submit(0x0, r2, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0xffff) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x4000) socket$netlink(0x10, 0x3, 0xb) 08:32:29 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:32:29 executing program 6: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x6, 0x0, 0x20, 0x81, 0x6, 0x89}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001280)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x30000004}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x400000, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560c, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=""/184, &(0x7f0000000000)=0xb8) r4 = pidfd_open(r1, 0x0) dup(r4) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:32:29 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:32:29 executing program 4: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:32:29 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) 08:32:29 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:32:29 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) 08:32:29 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) [ 486.608826] 9pnet_fd: p9_fd_create_tcp (5176): problem connecting socket to 127.0.0.1 08:32:29 executing program 4: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:32:29 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) [ 487.456479] 9pnet_fd: p9_fd_create_tcp (5194): problem connecting socket to 127.0.0.1 08:32:46 executing program 4: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:32:46 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) 08:32:46 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:32:46 executing program 3: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:32:46 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:32:46 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:32:46 executing program 6: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x6, 0x0, 0x20, 0x81, 0x6, 0x89}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001280)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x30000004}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x400000, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560c, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=""/184, &(0x7f0000000000)=0xb8) r4 = pidfd_open(r1, 0x0) dup(r4) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:32:46 executing program 1: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:32:46 executing program 0: dup(0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:32:47 executing program 4: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:32:47 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:32:47 executing program 3: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0x12b) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:32:47 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:32:47 executing program 0: dup(0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:32:47 executing program 1: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:32:47 executing program 4: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:32:47 executing program 0: dup(0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:32:47 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x0, 0x0) execveat(r0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000280)=[&(0x7f00000000c0)='9p\x00', &(0x7f0000000100)='127.0.0.1\x00', &(0x7f0000000140)='9p\x00', &(0x7f0000000180)='9p\x00', &(0x7f0000000240)='\x00'], &(0x7f00000003c0)=[&(0x7f00000002c0)='/\xde$@\x00', &(0x7f0000000300)='9p\x00', &(0x7f0000000340)='[+)$\x00', &(0x7f0000000380)=',@\x00'], 0x100) 08:32:47 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:32:47 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:32:47 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) [ 504.996327] 9pnet_virtio: no channels available for device 127.0.0.1 [ 505.014886] 9pnet_virtio: no channels available for device 127.0.0.1 08:33:03 executing program 6: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:33:03 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:33:03 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:33:03 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) 08:33:03 executing program 1: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:33:03 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x1cd802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x2811, r0, 0x0) 08:33:03 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:33:03 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) [ 520.643612] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 520.644977] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 520.645974] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 520.646895] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 520.647895] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 23 prio class 2 [ 520.654267] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.655412] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 520.656626] Buffer I/O error on dev sr0, logical block 0, async page read [ 520.658200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.659026] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 520.660185] Buffer I/O error on dev sr0, logical block 1, async page read [ 520.661340] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.662217] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 520.663422] Buffer I/O error on dev sr0, logical block 2, async page read [ 520.664581] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.665461] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 520.666673] Buffer I/O error on dev sr0, logical block 3, async page read [ 520.667892] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.668701] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 520.669889] Buffer I/O error on dev sr0, logical block 4, async page read [ 520.671053] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.671892] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 520.673085] Buffer I/O error on dev sr0, logical block 5, async page read [ 520.674219] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.675032] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 520.676211] Buffer I/O error on dev sr0, logical block 6, async page read [ 520.677392] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.678202] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 520.679379] Buffer I/O error on dev sr0, logical block 7, async page read [ 520.681033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.681871] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 520.683029] Buffer I/O error on dev sr0, logical block 0, async page read [ 520.684176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.685023] Buffer I/O error on dev sr0, logical block 1, async page read [ 520.686471] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.693400] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.694071] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.694625] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.695168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.698868] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.699467] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.700166] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.702210] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.702746] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.703316] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.704105] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.704669] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.705213] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.705844] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.706354] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.706977] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.707492] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.708055] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.708568] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.709140] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.709646] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.710272] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.710816] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.711368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.711895] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.712445] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.713019] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.713569] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.714133] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.714761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.715315] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.715954] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.716489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.717094] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.717641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.718250] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.718820] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.721586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.722253] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.722834] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.723379] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.724007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.724554] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.725154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.725692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.726340] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.726900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.727453] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.728058] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.728648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.729214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.729781] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.730392] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.731084] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.731623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.732198] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.732816] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.733365] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.733919] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.734476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.735095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.735755] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 08:33:03 executing program 6: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) [ 520.738040] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.738578] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.739182] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.739692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.740338] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.740904] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.742196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.742826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.743409] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.743971] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.744546] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.745112] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.745683] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.746239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.746837] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.747978] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.748526] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.749132] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.749671] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.750272] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.750830] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.751420] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.751973] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.752626] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.753639] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.754182] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.754784] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.755291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.756982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.757511] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.758125] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.758699] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.760436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.761051] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.761638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.762154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.762743] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.763245] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.763845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.764406] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.765019] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.765511] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.766113] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.766609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.767216] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.767733] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.768310] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.768888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.769511] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.770033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.770625] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.771162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.771750] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.772242] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.772878] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.773509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.774102] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.774622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.779020] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.779578] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.780306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.780987] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.781553] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.782187] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.782822] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.783344] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.783981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.784503] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.786515] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.787228] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.787831] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.788439] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.789167] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.789950] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.790660] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.792130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.793457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.794547] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.795568] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.796827] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.797928] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.799069] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.800190] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.801365] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.802487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.803590] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.804793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.805973] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.807058] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.808166] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.809312] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.810423] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.811526] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.812636] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.813817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.815015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.816089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.817214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.818310] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.819427] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.820530] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.821654] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.822836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.824064] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.825163] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.826276] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.827374] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.828506] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.829636] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.830824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.831942] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.833159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.836051] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.837209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.838325] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.839973] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.842001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.843188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.844242] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.845381] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.846306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.847291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.848383] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.849382] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.850420] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.851549] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.852638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.853924] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.854956] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.855923] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.856879] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.857861] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.858929] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.860016] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.861101] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.862263] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.863291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.864295] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.865363] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.866370] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.867397] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.868416] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.869477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.870684] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.871791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.872863] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.873909] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.874927] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.875975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.876957] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.877926] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.879078] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 08:33:03 executing program 4: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) [ 520.880140] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.881934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.883395] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.884945] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.886380] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.887885] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.889350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.891081] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.892515] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.894067] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.895551] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.897090] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.898542] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.900145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.901633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.903296] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.904844] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.906274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.907961] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.909181] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.910141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.911139] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.912084] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.913228] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.914269] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.915278] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.916356] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.917474] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.919477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.920496] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.921573] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.923938] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.924972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.925985] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.927246] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.928325] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.929587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.930607] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.931642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.932799] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.933791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.934890] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.935963] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.937173] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.938232] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.938753] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.939258] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.940178] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.940703] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.941253] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.941856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.942361] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.942884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.943388] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.944057] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.944622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.945157] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.945647] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.946210] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.946707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.947241] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.947794] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.948301] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.948917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.949415] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.949980] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.950477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.951005] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.951511] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.952060] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.952559] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.953162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.953663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.954228] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.954759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.955257] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.955828] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.956319] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.956850] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.957399] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.957977] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.958465] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.958996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.959500] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.960047] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.960543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.961087] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.961639] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.962221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.962748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.963259] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.963823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.964326] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.964870] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.965369] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.965991] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.966488] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.967017] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.967514] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.968080] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.968599] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.969127] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.969626] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.970242] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.970781] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.971283] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.971850] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.972348] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.972888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.973380] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.973941] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.974494] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.975026] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.975527] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.976077] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.976591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.977115] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.977612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.978179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.978773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.979262] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.979824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.980331] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.980866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.981370] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.984110] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.984622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.985204] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.985700] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.986253] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.986808] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.987298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.987913] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.988401] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 08:33:03 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) [ 520.991181] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.991819] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.997195] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.997703] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.998266] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.998794] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.999289] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.000855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.001359] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.001971] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.002468] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.002998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.003505] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.004493] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.005043] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.005540] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.006122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.006680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.008970] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.009467] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.010046] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.010542] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.011070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.011557] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.012096] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.012678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.013212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.013734] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.014239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.014763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.015258] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.015775] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.016268] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.016842] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.017330] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.017852] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.018352] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.018869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.019384] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.019923] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.020451] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.021041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.021581] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.022106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.022618] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.023145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.023631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.024164] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.024681] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.025262] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.025801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.026308] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.026896] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.027413] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.027973] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.028477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.029026] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.029598] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.030123] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.030656] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.031243] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.031812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.032315] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.032864] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.033375] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.034229] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.034786] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.035298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.035851] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.036352] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.036900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.037401] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.038000] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.038568] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.039106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.039637] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.040164] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.040700] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.041299] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.041846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.042377] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.042966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.043498] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.044031] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.044549] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.045115] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.045618] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.046156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.046679] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.047255] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.047810] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.048318] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.048861] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.049385] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.049913] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.050436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.051041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.051599] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.052150] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.052670] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.053287] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.053818] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.054329] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.055061] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.055559] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.056162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.056697] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.057270] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.057832] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.058344] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.058946] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.059442] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.059998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.060598] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.061134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.061670] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.062206] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.062771] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.063272] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.063829] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.064331] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.064962] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.065453] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.066036] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.066529] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.067074] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.067586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.068146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.068781] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.069356] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.070036] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.070546] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.071122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.071636] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.072199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.072739] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.073281] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.073868] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.074417] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.074955] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.075500] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.076068] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.076664] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.077202] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.077785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.078344] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.078895] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.079393] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.080067] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.080608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.081206] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.081697] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.082285] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.083832] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.084336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.084915] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.085457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.086041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.086567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.087126] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.087675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.088318] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.088883] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.089431] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.089999] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.090555] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.091111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.091646] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.092249] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.092894] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.093428] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.094012] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.094554] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.095111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.095642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.096260] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.096845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.097436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.098021] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.098552] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.099120] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.099672] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.100256] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.100825] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.101345] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.101998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 08:33:04 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) [ 521.102774] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.103595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.104187] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.104758] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.105256] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.105828] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.106328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.110116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.110616] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.111174] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.111676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.112213] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.112925] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.113428] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.113971] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.114545] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.115122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.115611] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.116141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.116649] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.117218] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.117756] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.118258] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.118866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.119357] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.119885] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.120391] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.120991] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.121477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.122011] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.122512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.123132] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.123632] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.124166] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.124696] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.125250] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.125773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.126265] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.126847] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.127407] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.127931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.128415] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.129014] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.129512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.130036] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.130536] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.131097] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.131663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.132187] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.132693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.133262] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.133803] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.134306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.134889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.135394] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.135997] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.136488] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.137055] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.137557] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.138101] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.138596] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.139150] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.139674] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.140272] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.140856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.141350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.141888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.142384] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.142951] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.143449] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.143989] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.144530] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.145091] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.145578] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.146119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.146638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.147196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.147693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.148218] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.148868] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.149386] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.149922] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.150417] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.150974] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.151476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.152009] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.152511] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.153101] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.153611] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.154144] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.154649] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.155181] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.155690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.156219] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.156773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.157326] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.157883] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.158374] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.158891] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.159404] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.159977] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.160500] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.161054] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.161625] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.162277] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.162846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.163345] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.163906] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.164408] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.164944] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.165428] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.166049] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.167231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.167823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.168317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.169474] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.170125] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.170633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.171249] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.171854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.172356] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.172984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.173468] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.173999] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.174547] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.175101] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.175621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.176216] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.176854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.177347] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.177898] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.178412] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.179033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.179531] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.180084] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.180700] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.181262] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.181827] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.182330] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.182925] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.183415] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.183939] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.184433] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.185055] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.185557] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.186091] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.186610] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.187161] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.187650] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.188179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.188687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.189305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.189847] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.190340] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.190919] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.191432] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.191964] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.192471] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.193060] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.193609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.194151] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.194654] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.195213] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.195762] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.196267] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.196838] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.197335] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.197945] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.198455] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.199011] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.199504] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.199999] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.200474] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.201662] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.202916] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.204060] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.205191] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.206294] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.207399] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.208465] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.209517] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.210839] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.211969] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.213156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.214220] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.215278] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.216281] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.217318] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.218345] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.219477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.220539] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.221578] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.222603] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.223617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.224638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.227032] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.227985] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.229081] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.234403] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.236022] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.237937] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.240282] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.241467] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.244045] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.249266] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.250413] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.251400] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.252990] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.254306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.255282] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.256217] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.257138] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.258232] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.259578] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.260550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.261544] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.262513] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.263478] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.264452] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.265440] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.266413] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.267648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.268720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.269650] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.271169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.275495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.276877] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.277829] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.278819] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.279881] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.280924] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.282087] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.283092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.284085] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.285402] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.286791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.287800] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.288897] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.289862] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.290856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.291801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.292893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.293876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.294904] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.298430] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.301813] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.303853] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.305330] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.306834] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.308189] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.309636] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.311086] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.312525] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.314206] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.315588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.316941] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.318156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.319593] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.320224] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.320829] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.321422] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.321950] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.322479] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.323069] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.323575] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.324765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.325274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.325833] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.326342] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.326922] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.327439] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.327983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.328507] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.329106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.329650] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.330171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.330686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.331246] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.331827] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.332371] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.332935] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.333560] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.334241] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.334818] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.335334] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.335918] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.336454] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.337047] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.337544] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.338230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.338759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.339334] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.339885] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.340411] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.340965] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.341499] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.342068] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.342663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.343220] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.343822] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.344326] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.344950] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.345462] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.346054] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.346543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.347198] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.347696] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.348280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.348798] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.349362] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.349931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.350465] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.351007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.351606] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.352171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.352745] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.353261] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.353846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.354353] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.354931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.355423] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.356116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.356620] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.357219] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.357764] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.358310] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.358861] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.359394] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.359933] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.360540] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.361122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.361654] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.362207] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.362761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.363289] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.363885] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.364388] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.365040] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.365546] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.366135] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.366626] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.368886] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.369387] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.369988] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.370515] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.371129] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.373836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.374354] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.374932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.375420] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.376030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.376526] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.377106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.377667] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.378246] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.378776] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.379317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.379855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.380405] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.380984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.381510] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.382121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.382670] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.383228] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.383794] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.384306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.384888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.385426] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.386026] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.386593] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.387148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.387667] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.388221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.388740] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.389303] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.389873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.390409] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.391008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.391550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.392131] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.392677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.393206] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.393766] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.394292] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.394872] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.395444] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.396066] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.396561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.397150] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.397639] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.398224] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.398746] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.399311] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.399888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.400443] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.400995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.401537] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.402092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.402631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.403190] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.403736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.404326] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.404994] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.405492] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.406071] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.406601] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.407194] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.407694] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.408263] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.408883] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.409418] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.409985] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.410524] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.411053] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.411592] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.412149] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.412699] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.413283] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.413836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.414332] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.414915] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.415409] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.416025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.416531] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.417141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.417712] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.418311] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.418793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.419332] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.419901] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.420410] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.420991] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.421489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.422145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 08:33:04 executing program 6: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) [ 521.423015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.423579] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.424127] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.424680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.425229] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.425827] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.426328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.426932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.427471] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.428066] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.428577] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.429145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.429663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.430232] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.430776] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.431395] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.431921] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.432469] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.433029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.433603] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.434178] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.434739] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.435277] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.436872] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.437420] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.437964] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.438497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.439041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.439588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.440127] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 521.442951] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 08:33:04 executing program 1: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) [ 521.480427] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 521.482148] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 521.483091] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 521.484059] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 08:33:19 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:33:19 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:33:19 executing program 1: perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x2}, 0x12354}, 0x0, 0xb, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x220000, 0x0) openat(r2, &(0x7f00000003c0)='./file1\x00', 0x402, 0x1bb) pwritev2(r0, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe2(&(0x7f0000000040), 0x4800) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000007c0)={[0xa62]}, 0x8, 0x80000) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0x1}}, './file1\x00'}) 08:33:19 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:33:19 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:33:19 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) getdents(r2, &(0x7f0000000340)=""/9, 0x9) write(r0, &(0x7f00000011c0)="83249416237e38dd0d635d66d90b52b1b9096c9e91fc332c2964bb087ce111fdca6229fa6b49bdee015c395c6057048c9f9776954fb85f1c86abbc60b493463964a930f6eb1060c63d8e118ae8fbd58fea9984e1e9804f39bfa817792ad5273c4589f11c9aebde1e03c76f122713b8fede61ff04aada234124ef3ef6933ffb054415956e0cc7cfe12e90bba2ffb6bff98c4be3e7108b7a12d666658d52fbd3d3f96d25c2890b4c978cff882784e3b39238b93c", 0xb3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/237, 0xed}, {&(0x7f0000000140)=""/219, 0xdb}, {&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f0000000640)=""/145, 0x91}, {&(0x7f0000000400)=""/60, 0x3c}, {&(0x7f0000000440)=""/64, 0x40}, {&(0x7f0000000480)=""/242, 0xf2}, {&(0x7f0000000580)=""/30, 0x1e}], 0x8, 0x0, 0x0) 08:33:19 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4) r2 = syz_io_uring_complete(0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000001c0)) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000080)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x14, 0x1e, 0xe21, 0x0, 0x0, "", [@generic='\x00']}, 0x14}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000007bc0)=[{{0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000900)=""/247, 0xf7}}], 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$bind(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), 0x10000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x385a43, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r5, r4, 0x0, 0xfffffdef) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r5, 0x40049366, &(0x7f0000000180)=0x2) 08:33:19 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:33:19 executing program 3: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:33:19 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:33:20 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:33:20 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:33:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x755500, 0x104) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x480002, 0x0) pwrite64(r2, &(0x7f0000000240)="02a94bfb99b9de1b16e67f3df05ba8f2287611d50b60ed00c2f1101cb58d1d5198e5ec7e1675a67b5c81e3304cc5a15667b140802873e357567e7ec9208337f68a196d6d700aee031db920b83dec37efb69bc41400076359c24852715e3960226b6269be73f2f8cba70dacbab6f3dfc0bd881859aea3729163ff2249ba0cfe009b8c9098172a235b0f534d25de5fe4cb1100b9943d4458aee27340b006eca13f483e5f96fac3e371450fa4c608fadd080734351d2ee2d876c908ec9ee90869e05dd51029b455ef79", 0xc8, 0x4) r3 = dup2(r2, r0) fallocate(r3, 0x2a, 0x1, 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r5, r4, 0x0, 0xfffffdef) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000040)) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 08:33:20 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) [ 537.556404] process 'syz-executor.1' launched './file1' with NULL argv: empty string added 08:33:20 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:33:35 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4) r2 = syz_io_uring_complete(0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000001c0)) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000080)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x14, 0x1e, 0xe21, 0x0, 0x0, "", [@generic='\x00']}, 0x14}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000007bc0)=[{{0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000900)=""/247, 0xf7}}], 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$bind(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), 0x10000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x385a43, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r5, r4, 0x0, 0xfffffdef) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r5, 0x40049366, &(0x7f0000000180)=0x2) 08:33:35 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, 0x0, 0x0, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:33:35 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, 0x9}, 0x1c) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x1}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0), 0x4) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x160140, &(0x7f0000000300)=ANY=[@ANYBLOB="219878eca4b240cf2c7266646e6f3d", @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="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"]) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') open(0x0, 0x40, 0x5e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="810000006600210e2d8e0000000000008e27eec0694c10243e77e871c600000000000000"], 0x24}], 0x1}, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:33:35 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:33:35 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:33:35 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:33:35 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:33:35 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)="d7061e52", 0x4}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x81}, 0x1c, &(0x7f0000001580), 0x1, &(0x7f00000000c0)=[@flowinfo={{0xfffffffffffffe21}}, @rthdrdstopts={{0x18}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x0, 0x0, 0x0, [@private2]}}}], 0x58}}], 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') pread64(r1, &(0x7f0000000080)=""/39, 0x27, 0x610) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) write$sndseq(r3, &(0x7f0000000200)=[{0xff, 0x81, 0x80, 0x2, @tick=0x7fffffff, {0x40, 0x3}, {0x8}, @raw8={"eb2dbb9f34b474b82c901d1e"}}, {0xfc, 0x7, 0x6, 0x9, @time={0x3, 0x7fffffff}, {0x8}, {0x20, 0xb7}, @addr={0x4, 0x2}}, {0xfa, 0x4, 0x9, 0x6, @tick=0x3, {0xc0, 0x7}, {0x8, 0x80}, @control={0x9, 0x2, 0x6}}, {0x20, 0x9, 0x7f, 0x6b, @time={0x3, 0xc0fa}, {0x1f, 0x3}, {0x3f, 0x1}, @note={0x92, 0x4, 0x0, 0x7f, 0x7}}, {0x40, 0xd1, 0x1, 0x6, @time, {0x5, 0x20}, {0x80, 0x7}, @addr={0x6, 0x5}}], 0x8c) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x329041, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r5) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040)=0x2, 0x4) 08:33:36 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, 0x0, 0x0, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:33:36 executing program 6: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:33:36 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:33:36 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, 0x0, 0x0, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:33:36 executing program 6: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:33:36 executing program 3: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:33:36 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) 08:33:36 executing program 1: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:33:36 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:33:36 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3f}, {&(0x7f0000000540)=""/105, 0x69}, {&(0x7f0000000240)=""/46, 0x2e}], 0x3, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:33:36 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000340)="da2c875e1f8ae236089fac0844b805b32a0983007a866d10219fd91151a07264c6c19277013fd2618ff8b575a35786e9fa1737e046e9e13fccf5d1db26cb8dbe18adabc935a1a618ded79a6c804f23f0eaa13fe052252f3146ea389454838afff2dd5c1732a6bfc82795f845311c2aaa03ec681ed9d1b63c4ce9867aa65b647c194766fb914ce8f6bb8f2895499e09af5117f23fd1541ad809e8a23985a84f3a015374ea7965bf45c2d7776e8c834cc61a4288a35b09af87fdcb471ba77cfbb3a85a5d6938f817efede179", 0xcb) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000040)=""/62) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r1, 0x0, 0xfffffdef) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x81, 0x3, 0x9, 0x0, 0x11cd549f, 0x48, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x0, 0xfffffffffffffa4d}, 0x1010, 0x800, 0x3, 0x5, 0x81, 0x1f, 0x81, 0x0, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0xe, r4, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200"/116, 0x74, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f9501004000", 0x20, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f000000000000040040", 0x1d, 0x2080}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000012400)="504d4d00504d4dffdbf4655f00000000647679756b6f762d676c6170746f703200"/61, 0x3d, 0x20000}, {0x0}], 0x0, &(0x7f0000012f00)=ANY=[@ANYBLOB="04"]) 08:33:51 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) 08:33:51 executing program 6: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x2}) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="200000001d0001000000000400000000040000000c000c"], 0x20}], 0x1, 0x0, 0x0, 0x44}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x5) sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x1d, 0x4, 0x70bd26, 0x25dfdbfe, {0x12}, [@typed={0x8, 0x95, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="146a1ae035f62269adfe625b9130bb9077bd33deada037955ef2f552335a799d82c37eb78401c7"]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x44000) 08:33:51 executing program 3: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:33:51 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:33:51 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3f}, {&(0x7f0000000540)=""/105, 0x69}, {&(0x7f0000000240)=""/46, 0x2e}], 0x3, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:33:51 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:33:51 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:33:51 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000340)="da2c875e1f8ae236089fac0844b805b32a0983007a866d10219fd91151a07264c6c19277013fd2618ff8b575a35786e9fa1737e046e9e13fccf5d1db26cb8dbe18adabc935a1a618ded79a6c804f23f0eaa13fe052252f3146ea389454838afff2dd5c1732a6bfc82795f845311c2aaa03ec681ed9d1b63c4ce9867aa65b647c194766fb914ce8f6bb8f2895499e09af5117f23fd1541ad809e8a23985a84f3a015374ea7965bf45c2d7776e8c834cc61a4288a35b09af87fdcb471ba77cfbb3a85a5d6938f817efede179", 0xcb) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000040)=""/62) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r1, 0x0, 0xfffffdef) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x81, 0x3, 0x9, 0x0, 0x11cd549f, 0x48, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x0, 0xfffffffffffffa4d}, 0x1010, 0x800, 0x3, 0x5, 0x81, 0x1f, 0x81, 0x0, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0xe, r4, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200"/116, 0x74, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f9501004000", 0x20, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f000000000000040040", 0x1d, 0x2080}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000012400)="504d4d00504d4dffdbf4655f00000000647679756b6f762d676c6170746f703200"/61, 0x3d, 0x20000}, {0x0}], 0x0, &(0x7f0000012f00)=ANY=[@ANYBLOB="04"]) [ 568.786236] netlink: 'syz-executor.6': attribute type 12 has an invalid length. 08:33:52 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3f}, {&(0x7f0000000540)=""/105, 0x69}, {&(0x7f0000000240)=""/46, 0x2e}], 0x3, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:33:52 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) 08:33:52 executing program 3: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:33:52 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) [ 569.646465] netlink: 'syz-executor.6': attribute type 12 has an invalid length. 08:33:52 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3f}, {&(0x7f0000000540)=""/105, 0x69}, {&(0x7f0000000240)=""/46, 0x2e}, {0x0}], 0x4, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:33:52 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:33:52 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:33:53 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) 08:33:53 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3f}, {&(0x7f0000000540)=""/105, 0x69}, {&(0x7f0000000240)=""/46, 0x2e}], 0x3, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:33:53 executing program 3: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:33:53 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3f}, {&(0x7f0000000540)=""/105, 0x69}, {&(0x7f0000000240)=""/46, 0x2e}, {0x0}], 0x4, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:34:09 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) 08:34:09 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:34:09 executing program 1: perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0xd40}, 0x0, 0xffffffffffffffff, 0x5f7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000240), 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e1d, 0x0, @empty}, 0x1c) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f00000001c0)={0x0, 0x1, 0x6, @random="767b24f4e073"}, 0x10) fcntl$setstatus(r2, 0x4, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(r1, &(0x7f0000000140)=""/53, 0x35, 0x2110, &(0x7f0000000340)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'rmd128\x00'}, 0x80) recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f00000000c0)) timer_create(0x0, 0x0, &(0x7f0000000040)) 08:34:09 executing program 6: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) 08:34:09 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3f}, {&(0x7f0000000540)=""/105, 0x69}, {&(0x7f0000000240)=""/46, 0x2e}, {0x0}], 0x4, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:34:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000aec000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000180)=@l2={0x1f, 0x8003, @fixed, 0xffff}}, 0x0) syz_io_uring_setup(0x46ad, &(0x7f0000000140)={0x0, 0x7936, 0x1, 0x1, 0x1ee}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd=r1, 0x401, &(0x7f0000000200)="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", 0xfa, 0xc, 0x1}, 0x3) openat(r1, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r6, &(0x7f00000000c0)='9', 0x1, 0x8040000) copy_file_range(r6, &(0x7f0000000000)=0x705, r6, &(0x7f0000000040), 0x6, 0x0) 08:34:09 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r0, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) 08:34:09 executing program 1: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r2 = request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='keyring\x00', r1) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r1) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r1) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) r5 = add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000300)="f0c09b7acfd012762b9c35e6e3eca676adeb25afc3169c034a22d89bab68e61891741259996e1c6f347aaf80613b0cada0c09d0365aefeec6a9ee29141790fe073bdda40e63e406faca3a5f9c4dfd8506b9ae0689cebae1faea1b29dfcd3dcd891283d9da8eeb8f71238298edefe2312fe6e33a2ddfb164fc55ebc06b0423e9aae7246faf89a7d39210bf9e2c4a8e1228b5d875199ac679a8c2d663d898305ac87", 0xa1, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000140)='logon\x00', &(0x7f0000000180)={'syz', 0x2}, r5) keyctl$set_timeout(0xf, r2, 0x1) add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r4, r0, r3, 0x0) 08:34:09 executing program 6: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syncfs(0xffffffffffffffff) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x4, 0x228800) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r2 = gettid() migrate_pages(r2, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x141042, 0x20) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d0069ff000000000000000007"], 0x1c}], 0x1}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="000125bd70040000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x4008090) pwritev(r4, &(0x7f0000000880)=[{&(0x7f0000000300)="c21f5f59fcffb00e3f91241286314fe21fa8f5f5338647c5f7e542d05bf650bd29d797c6d6e9a9a65ede89b25d045d75f500c06eb7abc2036de1c85b39f2de0ed0d0d33472fa9357517ca3e0e482fb697718a2e23a26a2a8c560312a203df6087872597f46b8380969b729c75583bb7e1f9cc883f6c66d6e6d34c11a5a8312671b3bb5fd372f3fc80c5ea8af255a02d926079cf519f45c6ab5c79000927f7fbdc0273099bfb8c6cb8c3c9d301c992594cfefa4c879ceacce65e1841304f4b5264bda55", 0xc3}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f0000000780)="e300e3d0f16d85f4ea9ae5cc9f0af6180c5f6485d3a54caba91debe6bb131c805efba8d46929051c2741a3582301d9b4fc1a730902eec16fd064ddd5b9f4bb5be7ae1cf0da69dd174f9f9bcd782e1f57cc3a9b1a30aaab2b2fe512d50ba5804892fd79b83ce8f59db82b90e553f2d6c4fc1dba589b17386e3060565a1f2f2871e7f9d46abcabfc6b8e0e6442bf6a3fe00249a6ad2da9a8ff05910a52a6ca0697c3a6ccad0d4e61d859b20ee68224d5fbdb966a7f93d871e4bf1fd757c390be2ef54d4e0000", 0xc5}], 0x5, 0xfd, 0x0) clone3(&(0x7f00000023c0)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x80000000}, 0x0, 0x0, &(0x7f0000002340)=""/10, &(0x7f0000002380)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, {r5}}, 0x58) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) [ 586.453093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5485 comm=syz-executor.6 [ 586.501547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5487 comm=syz-executor.6 [ 586.502177] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5486 comm=syz-executor.6 08:34:24 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfcb2, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x8c) perf_event_open(0x0, 0xffffffffffffffff, 0x3, r0, 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0xe64, 0xffffffffffffffff, &(0x7f0000000080)="f00881553b02787aefdb31cf38fe50c016f601060ed5b5bc82", 0x19, 0x100, 0x0, 0x0, r0}, &(0x7f0000000140)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xea, 0x0, 0x6, 0x2020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000400), 0xd}, 0x14844, 0xc03, 0x7f, 0x4, 0x4, 0x8, 0x80, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0xc, r1, 0x8) perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x87, 0x76, 0x81, 0x80, 0x0, 0x7, 0x61, 0x7, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfde, 0x0, @perf_config_ext={0x4, 0x401}, 0x11002, 0x0, 0x2, 0x3, 0xaf, 0x6, 0x8, 0x0, 0x3, 0x0, 0x4}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="73797a313e70d3f3a0007f00dd59a29d8afd84aa454fdb8a5e05351769a3e682f27c0c1024325241e361d5271f87b6171c5dd35dc6233a9f930c919efd58b328e5f5683c00eb6d026b9f64604c3667daaa6f7bf45385a9c6b7dd07c10d800c4b86863d62bf45fcbe0e68c447cf4e71bf69e228e8cea1aa6021b89f3d4ec27fda7b8b3376958378e60e0d59907c739d340bc3c81eddb7509ad6859eb6052f8a814189ff5b7b8e9c74fc2db20df87c2f06689f9a16fb3ed5ad21411f6883d53df6"], 0x73) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5}, 0x6a) r3 = open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) r4 = inotify_init1(0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000440)="6aea5cd4d4da9a587889754acf1fce5a0def4f0be78ef56da374c5fcbd659567acb2d098bbb9d0046f150f6704438b8b7a95285f0295013e2b12c6aff185c259fb2759dff619fb699428a67c995140c9a40c573aa6071454800eaf6d44b0cab604b8718ea7543b486340be6a65211964f8efd4a154ef88d889bdb2aad4e1a4206ba7b8ef68c82eaf6e7f04da2835ab52d7a060d3149d7a20708009c387c5c1dc147d4fe95176e5bc06a40d3cf220e09b6182e311c13d3aec89968f04e339b9ad0299977ff45882c41ec402c8005e5a4de3469bd86d93aa22fd32532100") dup2(r4, r3) 08:34:24 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3f}, {&(0x7f0000000540)=""/105, 0x69}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x3, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:34:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, r2, 0x300, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x4c000) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x68, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3, @media='eth\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x20004044) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)={0x1c, 0x1e, 0x1, 0x0, 0x0, "", [@typed={0x9, 0x0, 0x0, 0x0, @binary="d8c9310200"}]}, 0x1c}], 0x1}, 0x0) 08:34:24 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:34:24 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x14, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x14}], 0x1}, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000), 0x10) 08:34:24 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r0, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) 08:34:24 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000006c0)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x98, "94ccbe98505dd3"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000016c0)={r2, 0x0, "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", "91b7c7af7662a06c38569882e2605e1c7141cb47378f1f1990bf3d9b2fd6dc571fa1665fcc0467f8554d5389e92b4aa91aaacc84131a55edd3b46db2a02e9fa6b8781df4fc5ce2c1b14da0f27b3315cf82fd9d741579bfe52eb724309f8c59d00bc14ece9bc482947c58c1edb1c91c2cfcc8dbf01c41158a03be6bb73fe504a65aa9c164058da56ef16dd6a07d1ce307efee638e49008182f92c2fdeb1ce72b005f278c5b8edee2a28219c36757d2c3728a749965856d12289be428a15044cb80f885897436ece81ace1c487b82ac8aee70eb1dcefd57da0806db55c84a8af668751d7125585e4400ea62be54218dea75a8d4a6d8e37f66799499f6a2a30f4205e5233c62e7a5d236a6d1f9a2c0b12b0f53d7920437e1da878704dd8d3d022dd9b4a949e0f0a9dbe36f2a1661361ece5adc0b3ea3ac41ab20d15e1bda432fc465b78f08a058441652e58b53a3335fa5e3e08d6f1437c1e3e360388b12c1a896826028632d7c6d6f4f277d47866c4b1274574c4e41a0bdaa70f417dd6ccd75e2f975866a7d9789bb1a25f2bce020e8526ae64952f3f9379bd099219ba171a72b1b5bf404078dd29fb1f3c0b75e3a5712829e5c1b0f0aa6839269639c9602b0a476e107470f138434be419d369dee446be66283d701593c6ef6a5a6397dcf3eadea05af01985098c83e7060ad8c64af243d65701c3fddc3066d1397df8cac272603623faf7470fcb1de35bada2764504c5057582ce0a1c72c5e3796b6318477ed7d8e890b15cb380ec969c813a7482406a4cdb25ee0856f2674f49b7ed6f677e96ac17324cd5ce0df23ae015809cca5e22dfc2673140a49d9f1bec79a553928b8b1506b84c53e3e95795cf866b128a37fba9f14abdc2f6e066b42f12034f421cd0c8acd391e9820430f463cb6601178179da63dd7ac12f666f651012ccfda2b53d9fcc58928c22552b0baa8594ed2ceaf4af523355b938c357b2436caa013c757cea77b45c74723fe592e884eb937d57060f4a0091b207c2470a4fd0124ee38aa067278d42febb02b75c40fbe0b4c0fbdacc04e93a1a078c85b017e5bca638fbf8364f1cb9b0ec0658886d6ff276f6fa9a0880ba534d183154dc25e5c3a7c2fd134e5e0cc53dd89d1fa7a801238de1f565e68ac58086d954005a4cf906e323e9c8bc23ee7b73ed97000d7b2ff9054d0fd923f684c183cc36a73bda4a3fb190ebbc75128896ac9dc7080c3a86a5b0664281c98f26fccb718c61c7e3a8593c3468d3463d8f5ac860b51659569626653b28c9907c960e5504341245d6206f98fd5edcf2caeee2fe039495c81a4a4502f700f34675bd9c0fab608c2f935bb1af779510f735850b1b8f2db5cf87bcd36fb263bbf1ae5cce684f1a4e260fbf51c2f2acef5f76f1da094db865a6351ed320d30a3905fc57ccd677780b4a76fa13fb2672b09a0d4461174302abc1bb8cc861186124def8000c6319252defc137d01d803d68aa7cf0ac8b9064156eaf8ec4a7ed80633c8bcf225903c8087a0a3fde1778bf96bfd6a34b89135d3c066425bf50d567bf1fbde6ec57a35469398a74f9bc77ae45fc1eedccd04fea1902e97dc085b556f132f7e092b21e62ab81779d9fec2e3d1b695a4182af4b5e23fd481d1cdc7c9fb4ae6b2b98b0bac705601043068ee4d2d4e1c2c96cdc63f66ff25a57bd3af7203d9e59fc2e879ca2af8141bf9dd88d8315faffc21180f802f65bb5ff6d3ce6723e0141f34702fcf6e1e5e28a0b158b832c67c53f45516c7f0eb1f275c069436c86523cf0b30970bd1d75b8021b75d511a9055e8fe4ef2ca384b5cf0ae840e51b2103ce62fe9ada9ab5ef2e668e04d7954b9b9255747fa3feb71673acca4d75874db3aa0da3b34ed76e653fc1dda8328ee88bc9cecddd5bba254875ebf39f12528c9aa810bd5316980d53ec20cbf84bcd9e0f3b7697d85efcdcd7a97deaf0b611b6c5b7713be401a4c63fe8ac248383c9a54f3ebd1d6b503e0a53839b2a80e29424a52fdac75c044cb870f64e0140c5445cd89de79f8548bad5808f0a48549dbdf5cb66844d38130b32493d9a084e25b4964f26efa8cc4fa4afe908e770031b0e4ca520fb8d820d59cad9030f3ba2a5b9b87c909bbba8b7124f377b09f0473e5513a9fdd3954a857fc4e5d2610ebec71f5e51411eefb79d058538bffe041375c9581fc2fb9e8f4fb8d2171181ba60d5f5135688d97e8dc78f6a3cab01d640689286faf761bdc499f125c7d5c46fbcfa64e6c4a58517f16bb37ea48412e2b1b26b94e4e396a5455667049b4389e61a11c3ed9adf0a280056c25ac9e0b481e45a6fac960f48dab0fe8ceb9e0e799a6b2e1fbc33b663fdcc49171275ceac541104e605311f6117203358b8149362b3a3407853fa497b64dab940521c95b69fd6a7856419bf893e42dab1f45ff589c6c002e2ba14b932549c222d0d1cc6fe20bda416e68d30b9a2c72efa252786a8d39f413678a6e6a3abd8e0305713f71febb7425a6824a8284c7570bd73607b8297d4191236d6726ab0f941f4711f3c8f9c05df04beb84d6fa68b5a4c87c7f85dd791968bc357e1d47c9692461387167fbda0d314f6544ad0db7a84a8754cc7b61761c395fa4b3a3db22a43a8a3173c962db22881b722b4598e87ae892837a6a087b8c25c70f273c785d1e8da1dd4a62cc9cb3632c6bbfcdea4039b0bb188306eb95979a50b3eeb84c87dafb5a25f4ad8c710f27bd3674059164ba4b77d5237ac5586a0ec72cf00ec3e73db58a12dff8701c5f6cd13fc0b07ce7a73c7933f3c61aeeaa44595a09056619d3fb6889ddce07a7dd2b9a77186f4175641e86cf6c8eb81a3874a66254b4d25f205384ea9c3b128b53365dca881adffaf2499a04e61f860b0fc9e32050b47ae9530453e026ac3d634910fde9d5ac0a2c304733eafba44dec2ba7554e4a7f63cf52f093690ae6860f2a0e330e4526f5789f05c1f16965221635a8b9086f00579938dd4e0f155b7fe55b7d73ef81fd08737a9088e75794b54f5d286d2f841a4102b8d34c1e836aab3fd821b7c33ee1257d589baf22e55608c9fc049894f947a6c6b9306485c8a06af22ecffa0029fa949626fd47d7824b994c175d83f78ec574b82fe225c0164195d07f234d15565a53194dae0f4e4b7e5a21289e367f2063307253ccd9173f4bd45095a50dca5e86b075f2a2b549617774ba89d8eec5ed483c0616e535e3ba31dfc868a8c7c8586636e594bbd4de10b7654682e87602623e588b9ef77b5350400cf073660b7f28f4a8a884624a4338c3184d9164c2397cfae5dc5f0128f04aeda0282d8a003849e4abd6aef5531bc388208a229198a1687fd4838ba486f1636820a64bdc2b039af3d7be95000345b73ed8b1768edadb162d0cac82c1b28ca05155134f9903e1f68e72f6a7815fbb9450d3c498846725e086aa9ea1b9c4209ad13005fb3b79dd42070f5f01408520f13a26872b7e64bda3f51d38c0a12ebba0e526cbd422dfbf4d27adff90b275a02a2ecd21f646326451dea77196ef7b59a1081b1d845509e63d1aa36a330ee56c1e2ad17beae658fc82ab1e9b615cc8a9f6fde883d2370f52db7ebce6518eba595e7f8a49c72fc5c7c72c4d64ab1eceb4c690c3c4a3641836b2df25ffc8183b7f197b3eb744dcb004848f0e8c93fcfc1811307af5693bebda98ce7049eae5d0858ef307d8acd3fc64fd2c33cc3a33dfef46e61383c0805c10bc487ad6cd15b96d10f96330602f0c8bc805dd2ab2e8e039f1f49211d26468b08710593ce3c6acae20fe3d70ba94d75e616a4dc5e74afa6a922a600dc2db82bc5cd5ff499463ab3d85bcf765aeb443e8ed9990382c4f4f9a8c712f81f4af5df6baac7897d959988650563473f4415263c98e2a66d2dcc0f90ac55ea543be097155774c000d460250afa9d207221cfa033de3d15caa9794be1c791d003be4e682e717313588a9244ae5904a0fd1663e8e185026dcd8774ed0aaf45ff96d04352c122a359b02aa6d1a3320b1fc52e9d34899f35179cca12f7abafdcbc45c52970e9b3505012f59465d8f85eaf4ce47f1c922c4c4872f10c99ac76ecb6081749c54cb2401c8881f11f0a6ac3ca66c3682ce5f04d419ce486919bd2de9e6967bae257060be619cfd3c18fd1a32238694ade5bb6ceca84e1cc6f79bd1266b0abadd11431d30fccb3a56bdf2b2a4829f5b7cfb2c31598aee2b651ea5b6533331d9b7eedcb55835382f84f6c955229610df8a6413b748fb598bd638e7a569740cf82348f23c74d1f822986559ee89f729bad3e9f80005edb9d1669d31efbfcd429bfa3c0a3d32d29d2fc895f842f0488ea0a29a78045001e6b764d5200c6c1e22b1157ba5c64fc79f5e1778ff7816464f9f7886fac99bdc7a8e040e224e3e46516cd010534d6d8488a20d3d959c69b6bab54f19b9a9c0665de7f33d5b7819cd3bddaadd47dfbb2615e97a181a41a89280473c63711888bce746c3d8917a60e00a747d459d85049c2209b77284ebd52eb3568022a48efd525e89154d59780f9b6f627f36a42bb6c78e2ea245ea93b9d34ef71fca3d76d97b309b299da406467512fb7c2933a7082690a788861818e6c3524e657fe4b9e00b1e285986eb6b77050a798001846cf43cc1f63a073725262418e45694a330026c1ce28d2a8fb9ec5cc2bc6730bff749aa51651efc5a29456e819684e7d5aa756f11ecba550717c4f4e7eca75d36f09c295b7f3db52b6470505f8514df09d03d12a46057223e5e1d69f44900ddfe46c9a9128ceea3b7f45560634b600e0424aa081c2d5029a6a29ca59b91383630eaef491f8232e8dd9577fb236a6bc32d7ebc939d64ca250c6a4b05a6b5634e8db6a39b674450f7094366c3c9edbd1748eefec13d4174727040b031715a652b57b9801cab94d694d3346cdde3613b920b78b2e5e857c969a4b5f43b47db4beaee4f4f618a429bd049d0aca2aba5b9db3e17b0d67f09b135a3f1ff7d3f0063d5e0a32b7d085a3156911d9efd99a86f3b7e6115424988fdc5d86d8030eee60599a1e43ccda673a07fed344c7bb84fb79362197237c5c683b4a2ad6c8748497561ad2ddfad8ea6d383aa39bde5c46250bb148ffbf5b531b8256a94d88d5882ce070b7eb225453cc5a100c8454714d832f8de0434837a892a109367c1980c6d877a4b47074737e4b3486ca6eb1b563e3bb04a80fcc600845762f539a3aaac38e611997d365be1b4ddb99d22b08a952f4c6e1819832e196b5273453799c82099fe1054a67387634a7f1a0ed9f76ae6c0741ed5181fee049ed2320cecf198ab8e3e7371b69ec8df526fd3ab5d487472743eccf366fc36a85e2b2d4abac0b72728eb475032a3d2d0368c36218920b2c3cf231854ddf589f61da78acea0b8fe6008df0"}) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f0000000300)=""/81, 0x51}], 0x5) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='io\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xfffffffffffffffb) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 08:34:24 executing program 7: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:34:25 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfcb2, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x8c) perf_event_open(0x0, 0xffffffffffffffff, 0x3, r0, 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0xe64, 0xffffffffffffffff, &(0x7f0000000080)="f00881553b02787aefdb31cf38fe50c016f601060ed5b5bc82", 0x19, 0x100, 0x0, 0x0, r0}, &(0x7f0000000140)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xea, 0x0, 0x6, 0x2020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000400), 0xd}, 0x14844, 0xc03, 0x7f, 0x4, 0x4, 0x8, 0x80, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0xc, r1, 0x8) perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x87, 0x76, 0x81, 0x80, 0x0, 0x7, 0x61, 0x7, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfde, 0x0, @perf_config_ext={0x4, 0x401}, 0x11002, 0x0, 0x2, 0x3, 0xaf, 0x6, 0x8, 0x0, 0x3, 0x0, 0x4}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="73797a313e70d3f3a0007f00dd59a29d8afd84aa454fdb8a5e05351769a3e682f27c0c1024325241e361d5271f87b6171c5dd35dc6233a9f930c919efd58b328e5f5683c00eb6d026b9f64604c3667daaa6f7bf45385a9c6b7dd07c10d800c4b86863d62bf45fcbe0e68c447cf4e71bf69e228e8cea1aa6021b89f3d4ec27fda7b8b3376958378e60e0d59907c739d340bc3c81eddb7509ad6859eb6052f8a814189ff5b7b8e9c74fc2db20df87c2f06689f9a16fb3ed5ad21411f6883d53df6"], 0x73) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5}, 0x6a) r3 = open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) r4 = inotify_init1(0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000440)="6aea5cd4d4da9a587889754acf1fce5a0def4f0be78ef56da374c5fcbd659567acb2d098bbb9d0046f150f6704438b8b7a95285f0295013e2b12c6aff185c259fb2759dff619fb699428a67c995140c9a40c573aa6071454800eaf6d44b0cab604b8718ea7543b486340be6a65211964f8efd4a154ef88d889bdb2aad4e1a4206ba7b8ef68c82eaf6e7f04da2835ab52d7a060d3149d7a20708009c387c5c1dc147d4fe95176e5bc06a40d3cf220e09b6182e311c13d3aec89968f04e339b9ad0299977ff45882c41ec402c8005e5a4de3469bd86d93aa22fd32532100") dup2(r4, r3) 08:34:25 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x4, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa8bf, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x10, 0x0, 0x7ffc) r5 = fcntl$dupfd(r4, 0x0, r3) sendfile(r3, r5, 0x0, 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r7, 0x10, 0x0, 0x7ffc) fcntl$dupfd(r7, 0x0, r6) perf_event_open$cgroup(&(0x7f0000000400)={0x5, 0x80, 0x45, 0xfe, 0x80, 0x4, 0x0, 0x4, 0x80000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x81, 0x4, @perf_config_ext={0x4, 0x2}, 0x100b2, 0x5, 0x0, 0x7, 0x81f5, 0x8000, 0x81, 0x0, 0x5, 0x0, 0x7}, r5, 0xe, r7, 0x0) close_range(r0, r1, 0x2) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000001c0)="f130e94da4fea73c39893eaf8487b96fbc2f6037d310758895c39e5da00caf36c5b31edc565b8003d5c83bca619d8f9852aed823dcd6e9363941a57238d76e88baf1192b4bea533bed46561d6ebffc4cf26e9709dc369e45d0e7f7ddf4988104a64c8b1e4d28e12be1f04fe374a2a904915196f8e0e0686a1720ae924fbb1e561700f207e43ee85b176b5af32a26a04fce019c3ef82bbbeee4f9fd4219408b3beffab720deb1be0aa9b34a36fac028e45360681e89f3a666", 0xb8}, {&(0x7f0000000300)="a9a3e5c6d5a8b9d42390f00b6aeb9930", 0x10}, {&(0x7f0000000340)="1e0c90a8b29cfb0ba02633832556a112b9b7843d6c361f40cf9bd51af7135c7a130c966bec2a7b919d065b6048002d66d3f9e68e0e8200a208065d69669b7fc08f5578e2dfcdd5dfc14beb443b52e826d09d74e9652d6d2db936dd57a5c35f70ab3c5f198a3789f97827ef31a7c4e4a1ab9e7af2", 0x74}], 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000ceb54f4b272591ab8a916e09ae3f7a3c59de5268bf67e2ca0607000000b4a36a306f2e7daf775438a46270e83e657fa690fded35cb36e8504d538acf11846fe2d1f4bafa1e9a4b51822305ad99dbd9102665c5587c987ce9cc40e02dac2aa8dd5a5933ec9109ae563a7b812ee82e80363db3b646fe97a42230d6edda0195dfa5405cfd93ecd57c58d5a8d8d2", @ANYRES32=r0, @ANYBLOB="0000000000000000003999298e95c846271848070b0a0000000000fb00"]) mknod$loop(&(0x7f0000000000)='./file1\x00', 0x4, 0x0) 08:34:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0xfffffffffffffff8) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) syz_open_dev$hidraw(&(0x7f0000001200), 0x6, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001240), 0x400, 0x0) fcntl$setpipe(r3, 0x407, 0x40) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000005, 0x80010, r2, 0xfe99c000) r4 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x100, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x74c}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8881}, 0x4000800) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r5, &(0x7f0000000080)="01", 0x41030) 08:34:25 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3f}, {&(0x7f0000000540)=""/105, 0x69}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x3, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:34:25 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r0, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) 08:34:25 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfcb2, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x8c) perf_event_open(0x0, 0xffffffffffffffff, 0x3, r0, 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0xe64, 0xffffffffffffffff, &(0x7f0000000080)="f00881553b02787aefdb31cf38fe50c016f601060ed5b5bc82", 0x19, 0x100, 0x0, 0x0, r0}, &(0x7f0000000140)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xea, 0x0, 0x6, 0x2020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000400), 0xd}, 0x14844, 0xc03, 0x7f, 0x4, 0x4, 0x8, 0x80, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0xc, r1, 0x8) perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x87, 0x76, 0x81, 0x80, 0x0, 0x7, 0x61, 0x7, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfde, 0x0, @perf_config_ext={0x4, 0x401}, 0x11002, 0x0, 0x2, 0x3, 0xaf, 0x6, 0x8, 0x0, 0x3, 0x0, 0x4}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="73797a313e70d3f3a0007f00dd59a29d8afd84aa454fdb8a5e05351769a3e682f27c0c1024325241e361d5271f87b6171c5dd35dc6233a9f930c919efd58b328e5f5683c00eb6d026b9f64604c3667daaa6f7bf45385a9c6b7dd07c10d800c4b86863d62bf45fcbe0e68c447cf4e71bf69e228e8cea1aa6021b89f3d4ec27fda7b8b3376958378e60e0d59907c739d340bc3c81eddb7509ad6859eb6052f8a814189ff5b7b8e9c74fc2db20df87c2f06689f9a16fb3ed5ad21411f6883d53df6"], 0x73) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5}, 0x6a) r3 = open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) r4 = inotify_init1(0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000440)="6aea5cd4d4da9a587889754acf1fce5a0def4f0be78ef56da374c5fcbd659567acb2d098bbb9d0046f150f6704438b8b7a95285f0295013e2b12c6aff185c259fb2759dff619fb699428a67c995140c9a40c573aa6071454800eaf6d44b0cab604b8718ea7543b486340be6a65211964f8efd4a154ef88d889bdb2aad4e1a4206ba7b8ef68c82eaf6e7f04da2835ab52d7a060d3149d7a20708009c387c5c1dc147d4fe95176e5bc06a40d3cf220e09b6182e311c13d3aec89968f04e339b9ad0299977ff45882c41ec402c8005e5a4de3469bd86d93aa22fd32532100") dup2(r4, r3) 08:34:25 executing program 4: ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) [ 602.288119] audit: type=1400 audit(1662453265.254:12): avc: denied { map } for pid=5527 comm="syz-executor.1" path="pipe:[20806]" dev="pipefs" ino=20806 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 [ 602.291711] audit: type=1400 audit(1662453265.255:13): avc: denied { execute } for pid=5527 comm="syz-executor.1" path="pipe:[20806]" dev="pipefs" ino=20806 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 08:34:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001200)={{0x0, 0x7ff, 0x9, 0xd40, 0xfffffffffffff000, 0x7, 0x2, 0x8, 0x40, 0x80000001, 0x6, 0x7, 0x23, 0x0, 0x40800000000}, 0x8, [0x0]}) writev(r0, &(0x7f00000011c0)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="864ec598660c7d9dc03d0317b2732901b0293ee9956a1f6fc71b1606bd89b203d1c728bf94382d531c835d60dcf4b6a855089c87bef666a0dff6cfc3474fa5c7dfd3201c23879296edce49e5d85a9a1b719b7371a55dad8cea76956133391391793432cabbb9a93e2f7d224a625e70d25895b0b8a490cb94aeaa0d0efb39188217053fddcf5e2d8f4994f65f2875263a2db7a3383e8eb7896763f903184ed9ebf6591892877a2a8b63667a72b2edefade406c201e423d3e177cb54b6d9b09c91e4e626ccf999ed3e8966710b47d26a419a1d017ce1c77c5b639c3bc2bafea0eb7c7f0b31eca5c6", 0xe7}, {&(0x7f0000001140)}, {&(0x7f0000001180)="e007475510ffa184b7ad12f3bcede80165ce867820356948a377a366", 0x1c}], 0x4) 08:34:42 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3f}, {&(0x7f0000000540)=""/105, 0x69}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x3, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:34:42 executing program 3: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:34:42 executing program 7: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:34:42 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xff, 0x0, 0x0, 0x0, 0x20, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101041, 0x48) r3 = fcntl$dupfd(r1, 0x0, r2) write(r2, &(0x7f0000000080)="01", 0x41030) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x88000013}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0x578c, 0x8, 0x1, 0xbd, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x242880, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=fscache,version=9p2000.u,privport,nodevmap,loose,\x00osixacl,access=', @ANYRESDEC, @ANYBLOB=',access=any,cache=none,subj_role=,smackfsroot=,fsname=\\,smackfshat=,(^\\)\a^,has\x00\x00smackfsfloor=^#\",func=FIRMWARE_CHECK,\x00']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) 08:34:42 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:34:42 executing program 4: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:34:42 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:34:42 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3f}, {&(0x7f0000000540)=""/105, 0x69}, {0x0}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x4, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:34:42 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:34:42 executing program 3: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:34:42 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:34:42 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3f}, {&(0x7f0000000540)=""/105, 0x69}, {0x0}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x4, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:34:42 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:34:42 executing program 1: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:34:42 executing program 3: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:34:42 executing program 7: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:34:42 executing program 1: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:34:42 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:34:42 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:34:59 executing program 4: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:34:59 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:34:59 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3f}, {&(0x7f0000000540)=""/105, 0x69}, {0x0}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x4, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:34:59 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, 0xffffffffffffffff, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) 08:34:59 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3f}, {&(0x7f0000000540)=""/105, 0x69}, {0x0}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x4, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:34:59 executing program 6: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x1, 0x200}, {0x9, 0x80}, {0x6, 0x4}, {0x6, 0x8000}, {0x2, 0xffff}, {0x1, 0x6}]}) r3 = syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0xd3, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="d88dc575864afe8a9791a2007585814e2ef5a7e3836529fd09e7c534122f4375bc59e976ca92f57f41fc390a0029667cfde5ad612a235252", 0x38, 0x100000000}], 0x94a040, &(0x7f0000000240)={[{@dots}, {@dots}, {@dots}], [{@appraise_type}, {@euid_gt={'euid>', 0xee01}}, {@appraise}]}) r4 = memfd_secret(0x80000) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f00000002c0)={'geneve0\x00'}) syncfs(r3) sendfile(r1, r0, 0x0, 0xfffffdef) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xe64f}, 0xe) 08:34:59 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:34:59 executing program 7: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:34:59 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3f}, {&(0x7f0000000540)=""/105, 0x69}, {0x0}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x4, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:34:59 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3f}, {&(0x7f0000000240)=""/46, 0x2e}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x3, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:34:59 executing program 4: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0425ef37cbff05002179043f7918d8d6000000000000ffff5041814347706bfdd80c0bc81e5ad0be095c754a6fefd21a1c9a94d22074ca0187362386abefc5a660a6347689c594616d7aa787d7abdd13addcf79a3ecf564d897af8a06fb206560479badf94d4d5bf37125e391c5b46e7a4f56f88b93c5bc698e524ad15856c9c0333"], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x1, 0x3, 0xa1, 0x5, 0x0, 0x315, 0x20, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8d90, 0x1, @perf_bp={&(0x7f0000000200), 0x1}, 0x10, 0x9, 0x269387ea, 0x5, 0x1340, 0x7, 0x2c5, 0x0, 0x401, 0x0, 0x5}, 0xffffffffffffffff, 0xe, r0, 0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_complete(r3) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESHEX, @ANYRES16=r0, @ANYRES32, @ANYRES64, @ANYRESHEX=r1, @ANYRESOCT=r2, @ANYRES64=r2], 0x238}, 0x1, 0x0, 0x0, 0x8000}, 0x306a1cde6450d9e3) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x110, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x48b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2d4c0b72}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9aa}]}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4020}, 0x4000) 08:34:59 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:35:16 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:35:16 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(0x0, 0x0, 0x80) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000040)) ioctl$CDROM_NEXT_WRITABLE(0xffffffffffffffff, 0x5394, &(0x7f00000016c0)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f00000001c0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0xa015000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x474c, &(0x7f0000000240)) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r0, &(0x7f0000000000)='./file1\x00', 0x2, 0x2) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000001800000006d4f5ea8d2883b6e505c7cea66a2db362db284de9acf2aa452bb165cbaea6aba2761dc3c9f5f1a978eae340afcefed34f14f6c6e030ebcc94e7c64a74a205e81feb21407b667d1a99827c30496e4fc472fe27fef14604264cde8f002ebcb9d5ba0035dea7df680b1d64f0f700"/131, @ANYRES32=r4, @ANYBLOB="04000000000000002e2f66696c65302f66696c653000"]) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f00000003c0)) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0) sendfile(r4, r1, 0x0, 0xfffffdef) 08:35:16 executing program 6: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:35:16 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, 0xffffffffffffffff, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) 08:35:16 executing program 3: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:35:16 executing program 7: openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x3) 08:35:16 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3f}, {&(0x7f0000000240)=""/46, 0x2e}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x3, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:35:16 executing program 1: openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f9501004000", 0x20, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004000000", 0xc, 0x800}, {&(0x7f0000010400), 0x0, 0x1000}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f000000000000040040", 0x1d, 0x2080}, {0x0}, {0x0}, {0x0}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x20000}], 0x0, &(0x7f0000012f00)) 08:35:16 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3f}, {&(0x7f0000000240)=""/46, 0x2e}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x3, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:35:16 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3f}, {0x0}, {&(0x7f0000000240)=""/46, 0x2e}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x4, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:35:16 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, 0xffffffffffffffff, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) 08:35:16 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0xbf1cadf27cf12961) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', &(0x7f0000000080), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000300)=[r3, r3, r3, r3, r3]) lchown(&(0x7f0000000240)='./file1\x00', r2, r4) lchown(&(0x7f0000000140)='./file0\x00', r2, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000280)=0x0) setresuid(r2, r5, 0x0) chmod(&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0x1) open(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x800, 0x92) write(r0, &(0x7f0000000080)="01", 0x1) lstat(&(0x7f0000000100)='./file1/file0\x00', &(0x7f0000000140)) 08:35:16 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:35:16 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3f}, {0x0}, {&(0x7f0000000240)=""/46, 0x2e}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x4, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:35:17 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3f}, {0x0}, {&(0x7f0000000240)=""/46, 0x2e}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x4, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:35:17 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:35:17 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x5412, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x291) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r6, 0x0, 0xfffffffffbfffffe) r7 = gettid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7f, 0x3, 0x4, 0x0, 0x0, 0x4, 0x13004, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xffffffda, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x24, 0x1000, 0x1, 0x3, 0x7, 0xffffffff, 0x6, 0x0, 0x8, 0x0, 0x100}, r7, 0x7, r1, 0xa) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) ioctl$TIOCGPTPEER(r1, 0x5441, 0xffff) 08:35:17 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3f}, {0x0}, {&(0x7f0000000240)=""/46, 0x2e}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x4, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:35:17 executing program 7: openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x3) 08:35:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x2a8, 0x1e, 0x1, 0x0, 0x0, "", [@typed={0x9, 0x0, 0x0, 0x0, @binary="d8c9310200"}, @generic="bea35cf1ad1f2928734f5518f20688d064f64762a4b0fffd848bb185dde7fe22b93a6a21e70bc5dfaaa4366024048b63b6102ee6f5154b0f550c6c59806b6d9e2934acdc4723bf6a76306c330e1e7e894a1551d304f3dd9e44caa838df735edf8394a164d8045a589482d4df018eb2da7a898251724c9ace1af7c5db68bd8b48fb70ff1108c8e20ff60f1ee950e520c3432356efb26bd1c31a351df53b4c7ae9c23b60671dc219ce093094df854b36a5040308", @nested={0x18, 0x20, 0x0, 0x1, [@typed={0x14, 0x85, 0x0, 0x0, @ipv6=@remote}]}, @nested={0x1bd, 0x52, 0x0, 0x1, [@typed={0x4c, 0x95, 0x0, 0x0, @binary="a37dd5719c5fe8f000e99f44020a197f40dc1769ae975b4af739614256748fa19ea5b519de85cb1cf9ff4f2bd1a67b0ba137bd900d1d20dee7aeec542482c082352a67c58092797e"}, @generic="b4cbaa6d8def8d1abf459acf08e2011a26ebacc5c1b566bdb0883e254626aada6188beff2b11e68217aa9d83b1b6c75144b76312a54e322f13bd178d6196c26f58267ec8e8582e4e7162e19fb0619be7d60fc5d6c4938e9680960a3790726b5cbf8261bf38bc77b0635dd3065a75dc04c90fb0", @generic="c85da5089add7548f241efb7abf0eb009fb5a38651812c6655dc2f76c14546231535327f98ed4b3b37320c076c105b6a5f94b39d8baf8c676ad137b81cac15e4bc471d809601cf5990c167bdd79e6f7fea8643299fcee872931601e05f71c8e4fd965ea5be9a3e4a624296d01c0422d0b26002fc65674e149dcfce7afcef3ce3dcebad210da467c10e24b79f29159273e2e483c223e7f2fb317fffc35f8d9014b4c864167f6b11df138db26aac9783a6eaef6b1b", @typed={0x14, 0x7c, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x13, 0x20, 0x0, 0x0, @binary="29d9e4b5f1a515b01ad12d913f3244"}, @typed={0x8, 0x91, 0x0, 0x0, @u32=0x3}, @generic="78d5", @typed={0x14, 0xf, 0x0, 0x0, @ipv6=@private0}]}]}, 0x2a8}], 0x1}, 0x0) 08:35:17 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7969, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000240)) syz_io_uring_setup(0x4eff, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x1, 0x279, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000180)) io_uring_enter(0xffffffffffffffff, 0xf84, 0x0, 0x0, &(0x7f0000000400)={[0x1f]}, 0x8) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000580)=ANY=[@ANYBLOB="0100bb4a5f5b96386b1000000100000018000000", @ANYRES32, @ANYBLOB="050033fa0000002e2f66696c653000"/28]) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x2003, @fd, 0x81, &(0x7f0000000440)=""/198, 0xc6, 0x4}, 0x8c) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x7f, 0xea, 0x0, 0x0, 0x2020, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000300), 0xd}, 0x14844, 0xc03, 0x7f, 0x4, 0x4, 0x5, 0x80, 0x0, 0x38, 0x0, 0x8001}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa567}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000200)='\x00', 0x1, 0x2) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000014, 0x10, r0, 0x10000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000340)='./file0\x00') dup3(r0, 0xffffffffffffffff, 0x0) 08:35:17 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x4) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r1, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) r2 = openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2}, './file1/file0\x00'}) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r3, 0x0, 0x7ffffffff000}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) getpgid(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x6}}, './file1/file0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) [ 654.554745] netlink: 652 bytes leftover after parsing attributes in process `syz-executor.4'. 08:35:17 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:35:33 executing program 3: openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x3) 08:35:33 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:35:33 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:35:33 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/105, 0x69}, {&(0x7f0000000240)=""/46, 0x2e}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x3, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:35:33 executing program 6: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x100000, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000300)={0x0, 0x0, "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", "6a94d5ec0829999b7fd851a263718d2af0f075cdb9618d1750a46697262a62f9f6e85aa2df2510092b8e72a94862f66678494abefb17a46b978be4e5225644e08e18e7496e870e24d2f2526024c339a700a52dd0ce8d70be57c457491c95412e457ad8b854fe6c9dff10f937e9046c4f229c165eebd3c43e6a4e29114ef51e12682da7d55a33badcfef1cd20dde5098a01f36601ba2679265fbf72e740a3d21a839f0b9b0e2d209be7953ed67e6a2494f3b3022111709a6498963a2d5d3d1c693f2eee1d9a6a2cd06b77d52fc714d9de5b0dca0324477c1faba06b289fdd331544fa2e7dfc8e41e21cc131f48106aedcf210748f0b64b3b692588cc34fdb7ac160f76be2647395f0e24c0e52d0ff8cce50dd61822d634b5eb2ad6e7131fd090ebd04ff4480b73ea4cbfe19582d68bc3b3c1c188eef707f172bfc9411279f03f8e9c09dbc200c0e94938176db01c2eaaac33267d30a3c277a43beaa48557c759a72694e4100455c8587433779901c1042eff2864f03c4aa49b28d00b48c5d2118fc8659ee6cd62d3b88b1e3af5d2e9f648611d3abfda24649a34bf252fe0365457e6de58fe287dab607d3fcf5f87dea5877192467bfea502c75eac5153dd75aaeab2549a6d03357f91a1ae778826aedbec27fe4878468f9139ea6db517e4e1d3010515e72a1c0507bbc850b2d8b759f617b69a60902a6cbd2cdb7b6195b4ba5c2c3feec4fad40e889bddecd2c1c28c3f101b16daa6410a0dbcf766473003c3b3edb258405803e3e64354708dcc1eee3666d6ff2b3c185f3ca0c877338d04916dadd5ecad8a597ef81f2918984641851206694879430684e0f716641d4ca1ae6543e991f6ffca4d8a65294610eb9e3a7668be73608a38d5cad2aeeda5ea4f316062b4994657514ced5d82536491782c39961464454061041c4c66d960606a20f2e7d6d5a42320bc7193cf5ac171637ab66ebab3eb31d5246317b5f1c198a3aac30d24fd178662b88503d6f22ae1aaa277c4ac283347a9471c147432b366ea17c55ec69553fbb3e45f8056cc6b83688d81e24775219981be6b03a2f6d4bd15e8f22008605b4372342b2680c8e35847fdf9975c61ffdbf48a4801ff70c2b6a39920320efce071491e10c52a5a52c88da1a974ca629a94dfd5dea05a06fa7b9f40328619becee4102670f8b3d7bf53f7e2608ea52edd53d594d81da7e54d960dfdab217d177ec07c658315c7fb911d457e83631a01b4cd348038a53c006920bc3f2656a8a2cb6bfe23228ab434608c6602e522343d884d5f52bfad26d365ee81a7bac5aff02656114a5d4463c4998c9f14cd361e440657e59860ad7e63e02948cd21ecf3aec3ff879d8cd75b2d9ad369a7d9b22589fd53d11753bdd3e23ae0b3bc22302a4b0f00aa8d0fa732bf388640d050367bf1452e10188e843f7bfc5bc9cce578c0a0734a173d2ee83362465c9bcb6073b24eec59f8850b89c2d21cb0dde2d8bbebf6def301642be9a07708e9657f75483047652700ea480b22df6247aa50b2be8aa18cb699e781a6f11cefb1d58557e9207a5ef940cd534c74257d640e541e906d6a19b1625e20a5fa7ab710123d1db63847bdcfda8a127a7c1f2ba4e1096c35cb6a69c8b12ad38d15c9dc780ef2a5fd45c3eed3bb2ac3faf1f7c1752dc3a0cb0ed1c7e1bc5761e8b5bf19b773a3ae141e19432cdaf24163b881114b2af458a6c80543d095600d89f38f4f8e53cf25d0506428fcc552702bb50107da04ca1a8e5b7bd15e90ce64e6114873b30cfd5246947f9b6014c6d96680931f92a743c8270c202475ea81bc4ddf00fd6fc6802b902cbbe2487e8a44d4d9f4faf9f75ed89560c9d55f128d88d27bfdc3b76345a784d42f4e784a2d88902c63dde3013ade4bdd8443191b506aaec79e62cad53c42fa23ac4b1e64f4eb249dd5da059ad7a560598bcdc13d7bf3e405577dc56207eb7b026d461e3baa502026cd316aa9426f1cb328c906ddeb4f3cc4ded7b9469a7e26a855ff399e8fcb3d9410456bb84178bfbc14a7ff0a3c2377d2b14bc9578e4245e9ec359d76846509de034517b51ed52b3b9ce9cf825e08096f59ae56b9be6772a88cd28850ce15399a5cb00bbd7a15de832bd0271ff7dd3460258d7ddce9ec4ecbd3b930a1506b9bb98737055ab7b2f236cac5acba721b3d3b1a2fbea76479d67b12780a1e5b3f2ab1cf2a362ce86d2f3ef0ab79e5fb61900274d864a1c110fe1f6e2da666763b6cc4a6de77738585d1cfd32ff90549c4bb5f54ea2ec361614a3d22b2533199d4aa1ac3ea2c97baa513aaa6e6624b83dd1e86e42265d0fb4b57bf45d5c65638f5c6b622185bb83ac3d771d16057725793f0a72fb696ea2e8a9f64285fd9e125e6721c37168209f948f8d8250c99111036cc4a83c21ae1103aa93a1b0df8cc6d78979d50255a1d762ebfb0039d97fb972a6f8485236754c2d51d72e96cb459a4d874189b0e9f5015f432ed024583a3245b3af366d4cefe53775b92620f9b51e3f2df2c319abb318da4fb1083b575881349215ac34eaab908dbd11b89e7909efbd5c3ce5c555aa3001b31dbcee31d7a1bd522b9f14d7df542c8cd8357fd70cc562726911a4edd2ecc5f6c79f0bcbe74db5c5cb54859eb74c5cc1a415b4344bfdeb0455e7ef791728b886d7a61a89ce4ede7b3ab1823a0bcb34ad1cf8cef54ec9068b71381ee29c4a980bc2184a4e843df1b61b479d97ba16fbf97f6b059aa750af7c0548502b7c1b86a6823a7416b2a4bd4be007ef1fbbe5cf37c952343718e0c34d49214996ce296709424f7ec4b74b0418dff1b15876208e1212d0611d9424bb7512cc5efcca9c3ef88364be03a9f98d1ad42f0444529ce4c9c88ec4bd4137e61ff5b48d29d10771333604a6109c7755bc59077faf23983d39ed756212bf9ed1d17249feaf3b98e34076e054979fe9705352d7cb31f091a82c3bebe4743db9f557f8f7a0d0af80b114be9638f1d68a98a974c2e882bc71b0b2b4033215e1ed07705d3ec4db49327c802d506f7fdb6cb1bfb6f8e2daf05ec52038fe26bb6e824189982d55e409919e279d27af6c5504e307b2bebe68ffae5a7a02a4f3b1b6e8f4bd01882f15d0127318f7b26b95ef449c657254ea3c6193302a79ad60a73050ee5ef71eaab99a663609e137b858f056b1acbb8c48a7a683dee3fd9fabe32746a7707a01776cdc225d053028d5d9430e64c5e70d35cc9fb345353a08615d160861afde469724e4e72c714b195756ce44a4aac831d53b3ad4b104d4e7e432d77301cf925b5d218686833839264ee1cc3245ca19c58073fc69e9bb6f0cab9931ed71b1dc02c0c0334fd4d6fd5f431fa7836ca58e65448fb5e6f66b3bde8fed0f16b88b6c8e6d9b9b97c062bbef5a8b97157f1c1d9129706cd7f08d38ccca786e98c9eda47c4d8d0bf212e3dc262ffe5d2cd56d29ac053439351d775d1cfebc32b7764d1857ab9154c5a522190d70dafe6badbf118726e6612dd3172dace6b692db49f14d62ce01641a1a07d093372ff60ecc29107a59b584cf145301b02d0722f6e222e5da6ee5f23f8ea1fb48ee302118fdc3b718993182d81cdd7136c27d29f38a6a0e3839b2e82559c870ae1f1401d35341b7cd65530ab41ef5c3805170369291edcc12c8a364a2ddf35353ab9b7edc8ce1c143b4d341159895099b44e20687a7579678c24b0f3a616d1f2e105593bf0845e1e147125d17189d64c11d85568da261591b8f1596261a2c6fe1ef2b6565d31193ec3d9133d8d0aed71d021a2968e6f2661b4165084f17666e8d636a62deec1bc46fad3e1fb31e4dcec19a6db75384cd64c97cb4b5eb4adc0d950ed547cb61eb1001da6702057759254c2352c806db0bfed6637019ddad01689d2bc123439a00e92f3cbf602a3b5206f74fa5b137986456655f624722f6b17ab11d820b05fd95e0a3426d934cb99046eff9a41815d5ff4be72d6943f6f0138fdccbb2c2c658fdbff9759b46194fd375d0565064f0324b606286ffba40be002d7cd941c6e73e4d7a15b96e264385db93ff36d3e2254c06e239b090f69e1bc9bede7487f16a4d8f65cc4561fe55709c76818b275df46fe68c78052cf98a8964b7bc18eccafb376b932e57cae9482bee145314c69f6635656df00dc417b7110ad426ffce4c6f3300b7e68f3dcef20b86731a269557d390c91e8530e08df38a1bad12e041f024f81233a858329bac5685ba9c821eebff57ce797d9c75ffc36832497fd7ba674722f89d2746cf48096be6cd33169a5aec313f7c37bd48b1720d177836f5add287a5c1115b9a9897649954ce796d4f3a825216ec8c359733396ed39eb6c9f710c6d5e78672cd8f96170e1ebf76935e8e0cb7a55f8efadab560212067ac004c5e311943c5b9180bcece94c0b05a83fb37a90a2327e8faabadb5e48123823057ebdfe9041f7b6a3368127c8dff815b9e7a7cd55cc79f7f2e86581de04b96958dfbb13626b4f1cc0fe0187f4de4082c4e7e5ce8047d5bd2bc6dc73c7f41c0ef92a32b48f7a921c34ed9b04d1aa519090656f4c7ca797a329f782f602ab5836fba555f1971aa65978ef8a691eedccb9737ce9385522ec3beef59b5d8c667aac8e883bf10eabab70fd04dcf7140504b9901234e3a8814de8c4f1f5f6fda73319d78794708f6af2975dcfbcfc0dbd913a4ad005655098a8d104f84e140a7e9dc4eb41b9c6e6217c6f4379daa92941fc10992fdebd2d3bde9e3e66d431876bbeb37b6a2280ca1d59c4d5b04f0b22717b652b284f69570a8241b5f2ec5800f71cddd8f01353eebc76a568ef767462b701c27496dc1df34eb4ce4ae2959260c6acb331d64d37994553c3ac547d62c93b1a1e6f97d2dfc96893bf186509e19adc9bd49f236bda9621936c9f9fff3a3cf7f7893d1b8ef322a3059b2baedf57a0bf81aa0fa70a4832c97bfdb31f5e8ccd6ac40aacdafc446a5eab0929118810b48abf5b7623206ff1981858da83784a4ed1a7b71684fb9247edac87b27885eda46664f1ae670574ff26fa31c5a412ae6e3f49ac6f44b0a11267bdf0a03d085ea6deeb95495d1f96988b2e3c0abfbdb66fb446cfa3ab3726ae7e0b43cf3fa06dcdc13f77c71da20e46ffa03b92bf0d82ae5aad18592a3d46888d992e4fecd11082a5e0d64243929b8a7cb42bdb2c4c8194e88de1d1811534b2a77fd0289c8663ae4e23a14370f42a865a7b8dc7bc53777e682fd2ac12a1c78d9224f16ef2668f7933fb1ee442a9670c24fa146c054e55ec9074cb9819b40e1d14b14e177afe474c652afd07fb1a1f351a59a8d1bcc6a82798c54b91b7645004acc16ed628a13c8176d41cda57fe5ebfa96b6c072aa98cef051d74336be1b0a7c745341fa6f7303e6ad0a0d149497b0cd9f9e1755d8d5797f"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_io_uring_setup(0x3465, &(0x7f0000000080)={0x0, 0x2235, 0x8, 0x1, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000001300)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 08:35:33 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREMOVE(r1, &(0x7f0000000080)={0x7}, 0x7) write$binfmt_script(r1, &(0x7f0000004280)=ANY=[@ANYBLOB="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"], 0x100b) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000001100)={@private0={0xfc, 0x0, '\x00', 0x1}, @remote, @loopback, 0x10001, 0x1102, 0x6, 0x500, 0x4, 0x45302cc}) close_range(r0, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x4000010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1, {0x0, r4}}, 0x7) r5 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000001180)='./file0\x00', 0x6, 0x8, &(0x7f00000035c0)=[{&(0x7f00000011c0)="38e219f87c31c3d18358d55bab26e039d16e7ca81d353cea7ce1d58d0e69fd7dfee145c0d96accd21354e9d912ed2394f4fb8a224abf04f1d8c8afbbb68b0494f130a6028e0d4e6e1f67c09803f95e7a55e18e4d27dacad6939b063e3bd1e5fd2de9e503dc55f9255ed5f1feba1ffcb659925eb03ba1eb1db9aead8a39476b1113970490dee5642c4bb93547fd9c4384e0f989cf3fce17dc693be871d6e2a635b535cef43c82cf06a8df0efe0d3825abf3d7af3b014ac59df4b1ee504f22", 0xbe, 0x4}, {&(0x7f0000001280)="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", 0x1000, 0x80000000}, {&(0x7f0000002280)="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", 0xff, 0x4}, {&(0x7f0000002380)="e60d3d336ac31ae40396db9f0799745ca301757007239e70c05a4dd20e7e6efd787db30d7b2b5ac48582f246bd137cd0c7c45a37c783702e93305a81dfa3955930a007dfad52a1b372a64de6e643106b3fc12705d43e725ce3fb865b8edaff45e7a99eeb52298aec0e9b4f6ca90923b96eedddbf45782f098a97adeeb069f58c0a02756e089f500d7b1cf823710c99e245380e5e8650b32d7363408f3a0817", 0x9f, 0x3}, {&(0x7f0000002440)="8645655e8de884b0df2aa14e973636418641fb0ae3d985657b54c881eafcbdc683110618ac94d6568727924b3494cbb11bc010e424153cd55d66029178b498b4efb49cf0cc136b653ac52ec1303f8069bf5a9f9eeb640c52e6ad30dad2f9993e8e9c5542190627ac3532af7a8239028a6e555ca6c87225d9bb9dfcfd8308c75e23e69d352f38c554a66e31b2ef49f63e167b6d3444371aaa43f0", 0x9a, 0x8000}, {&(0x7f0000002500)="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", 0x1000, 0x8}, {&(0x7f00000037c0)="1bfa7db598f0417e8519b7f0d8ffcf21e6514913862971480f", 0x19}, {&(0x7f0000003540)="d55cfe44487db6f478c38922a5f3654fdc93e0107a6b886440fe618a7cd20138ac1f43f86e7255e0ec6009430339477fc8560f8ce2057fc9a943395ac5b08443f953cf5005a43b25a7d7ca2e8db146ea44698d4198cb375c38062f1b0174e327df95b8396f028fb3ee262d89df", 0x6d, 0x10000}], 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f646f74732c6e6f646f74732c646f74732c6e66732c646f74732c646f74732c6673757569643d62643562336436372d386435642d396237332d643033002d36353834353334371e7063723d30303030303030303030303030300000000074382c7063723d30303030303018aa3030303030303030303032322c7569643c", @ANYRESDEC, @ANYBLOB=',uid<', @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=0xee01, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) syz_io_uring_submit(0x0, r3, &(0x7f0000003780)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd=r2, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r4, r5}}, 0x5) r6 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8001}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendmmsg(r6, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) recvfrom(r6, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x0, 0x0, 0x37) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', r7, 0x29, 0x0, 0x6, 0x4, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x0, 0x700, 0x0, 0x10001}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000003500)={@empty, 0x16}) 08:35:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1030c2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x520080, 0x0) syz_io_uring_setup(0x69c0, &(0x7f0000000300)={0x0, 0xba58, 0x20, 0x0, 0x170, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x80800c, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c773df0cce4c7733abfda17b8f53aca919e95546a2a65c884b5e8d02f9483f0c06a5d0335c86171a15146a2e30817420fedbabd2de729d1b1b4fb1dda34033e508cf3c7e63d92fa2c42284ecedc64b280bb6b629bf8c7efb84ef25b81daa27f7bf7f0ab56a95e2547e18edbbed38fd38b00dd", @ANYRESHEX, @ANYBLOB=',\x00']) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x0) getsockname$packet(r4, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000001c0)={{}, 0x9, 0x100000000, 0x100000001}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) 08:35:33 executing program 7: openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x3) 08:35:49 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:35:49 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/105, 0x69}, {&(0x7f0000000240)=""/46, 0x2e}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x3, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:35:49 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/105, 0x69}, {&(0x7f0000000240)=""/46, 0x2e}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x3, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:35:49 executing program 4: getgroups(0x2, &(0x7f0000000140)=[0x0, 0xee00]) setresgid(0x0, r0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x101800, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) setfsuid(r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'erspan0\x00', 0x4}, 0x18) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r5, r4, 0x0) 08:35:49 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:35:49 executing program 7: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:35:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1030c2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x520080, 0x0) syz_io_uring_setup(0x69c0, &(0x7f0000000300)={0x0, 0xba58, 0x20, 0x0, 0x170, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x80800c, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c773df0cce4c7733abfda17b8f53aca919e95546a2a65c884b5e8d02f9483f0c06a5d0335c86171a15146a2e30817420fedbabd2de729d1b1b4fb1dda34033e508cf3c7e63d92fa2c42284ecedc64b280bb6b629bf8c7efb84ef25b81daa27f7bf7f0ab56a95e2547e18edbbed38fd38b00dd", @ANYRESHEX, @ANYBLOB=',\x00']) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x0) getsockname$packet(r4, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000001c0)={{}, 0x9, 0x100000000, 0x100000001}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1) 08:35:49 executing program 6: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:35:49 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/105, 0x69}, {&(0x7f0000000240)=""/46, 0x2e}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x3, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:35:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fchown(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000180)}, 0x8000, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x4004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 08:35:49 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:35:49 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x81, 0x0, 0xff, 0x0, 0x0, 0x2004, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x40a4e, 0x0, 0x6, 0x4, 0x1da, 0x80000001, 0x5, 0x0, 0xb3ee, 0x0, 0x7fff}, 0x0, 0x9, r0, 0x8) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20, 0xc000000000}, 0x0, 0xd1e8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000004280)={0x0, 0x0, "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", "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"}) openat(r2, &(0x7f0000000000)='./file0\x00', 0x240002, 0x3) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000003280)={0x0, r3, "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", "bc814f1e421304699c87988d578a0a83e359f4c0be15077dc7547e05d8d3e86fd0a544b052031ab5435bfa1d3cb761dcf3cc5ed23c524ee1c3178c0b78972b97712343f0c489b8dc22aebc61c82ede5b06d0e78af78d2c0971f7ddbc5f5698fb66c6bd36db6289222aee97a1cc0492740d3d84eadcfeb2c8965cbeaae9f381cfc6c2849b0371e0ee8119179cf7cd82c855e1ccac83bec9af15fadec7884bf4458259dfc82682c66b53620ff2f6d83326671102337965af980249343ed01173744daff6b3c705225d7faf6c85bf102f18aca5d8e229fd8179954945de7f1ab059a15f9786b194654c5bf732f9fb83e1f985654347ca65022de65f67320a0fb2281737a3ddf710c645ac69a8453c3b70d560ef653514dbc0eb06b73b4f633188a7ab2f36d7e3bbfb71f498dcd599e9fd4e6f73a8e06d625a58bbd0c63cdf50ce7d5064c21e75b92f44506d720b89550cdc8227f32f25510ed8d4e441b132d9f7157acf293ee3c0d44d072b5e81c4c39e2fab668f3f30bf3035931c93df026b41f33c15cb08b55c00ff2d6ef5171a481b0ee2282dc2306971d73c1cbc21bf01b23ca4936e4f4518207e0e94c2973e709b24d13b63657f4d1689f7a4f779640aab3a4e7a6e3b6e4040a71078569f33fdbc35c23e8b030cd07eabbf542244241463937f1189c328a6d0967c65ff5307ba71311ed83289d2a24db12b38ba399932cf0d921bdc2d4ca64bcae4c28622cb69509089aea132e1237f33da2e7ba216cd610a8dfdac60c089260ae5e5e827d133e72deeadccf2dc14bcdaf270aa9d9072b2098ce65738896a1d908e2d6cf42f90216e5e5dc2d48b458d3bf901fa68d4f4bcc95dd145354329baaa5f6d72983b3c5cdb6e6e90e754ea3d9ca286313655ad326ed5f017e1424b7573918e3acf96644835c09be7085b043ec416b97a6eae45df8d312519f14ce8469386f97e85509d5cb90d8b1d66dc72219176ec5022edd76c02ea8e723ec7086f40788f45c37df77eb877d2654b3a2009d603cf223f93b5cd83f846da8e75ecbfffc4d6f11a11a7ddb8744cbd0c82f156e5915a2c879efb00f48afda0580b980ea0143a2bb111cd59371e954e5593fb3f4d14190056333fde9e40806269380381fee347b43bb345e50eb065dfd65e4202bb532bc36742828d898d86337d87416018d2246aa621726b376fcf2d229d8c9703f0f6607703e1b939a5023bbae5528a3aa4a24736a444ca1cb8c3075a110414c1629bbcd5c9c4e4080aa44674a34f5c31347e5bca2052fba2e27ed084449da3314358cb192065e1999982b95cc18a488e3189c404c3ba2262b424553e425ac01a78c7aab15e48b2d78837ca0127b1bf28bdd46e14e58c0717687acea3fef73e035c0b6f482fbfeabace42db1aa83a1f3644f9e63c87afc3afab26090af7e7c4fb1b81f8b01bc4e4814be39b0325a270657954f26af83a20d130ed6220a5212205440bb48fbbbc07a7b18cd0bd96d3a250c66bb93454f074a1ddcb836e3ab6af4153058cd94f16d9641f3929087c2ed87e20527eca22b3b3ac62c00f0620d5f28c518c5d03d8f180fe524bfc79c8e8577cc576192ce0547242e747351cde648664691f455e03064f57196524c8e3370efaa64ac28e09b1f2d2b6d69723885f294ea2df1cec3dd25c87883ab65aee612d325eb04cfaaa41d340f65c5745a14fc541902bf299f97f848034fa5a9968fd052087eb5fe6eebb232146191f1fec644d61aeee0ac3c218fbdc077f5c11ee746bcf9197db06ac78f5aa56b64a361ee6ff35efbf679482673cf5d5c51755f33d7a4af59a06484e787df20d684a78754634e651ca76e042643c0b60a22c2a2815619a958ace318639757e7a16d80add9fa9a61fe8ab4de921736de7b75af95bf9b57417451f9d812ccf4db0dd46acfad3136ad94dda1cc622a83daa02181a9f2e7607c77c3d6fd032289f93a1a18f7508366b96c6cd4d6bbff2b3c249b16d205f6369ac1d5af8a4e81400bdf93c820ae6f3622569b20410973a7f58ea541f64e977fb730c853d5fa809cc57b65c54e786641d28be2750dc637a794332163c972c896ae4d86296ddc39c3d433b546b9d7dbe67bb43c129aad2c32dc68d8dc26e489682e00ab92a16bdbbdd5ad803a0ae91a5af285db0fb6b8d118f2d0f120cc1667530bfb4c32b4fa4caf1192a035aafb458f311a04b6491014f0629d86a712a356ff2bac0df5b6c497ba5852e452b226718bea604d2fef071f443c055318045fcd5eea0062432fcadd11f93f0c152e01ff5d1f510f63b6266ae1b314ce06b4f6a388dbeccb7d257e6f3d82b0c23be3bc134bb127b0bf82bd7dada2c645e37621858fdd650fb213ddf61d07e46b8eb24cfa0b66f38f7a90f7d4d3439e701b8b0e36514b5a333d4b8c3439c3f67f074f45776c888d00f5e2fdfa65c175330253d3e032a9442ea08a54fa661c1784ff4a01d90f28a2936659d2d1bb6a2670438a3ac7864b17ed1cada9ca479045db0162297973861fdf6f6fc724543181133f201dcc4035f75585b3d3fce08eb8454b45b87a8055cb14ebcabd324feeb73c46c57b5d4e0de70863920b422952049f756d578971ee1c583a17467258324e13f349f8d36aa55820a7e76e51c4afa0b8c4f664432c5ad089aa79a39a2a6e4ab46b48f5b69ea6cfc5944b3e058bc837bc556b28351895734acfa3693f1537b58374bd39c5cca45e1ad9232a15554f1046f3cd60cbf78e5819de443b14d4887d83f14e5d944b8fb8fd678d6decafe117f93fc8cc44d3f6190c0f9f66100ee9f58818fa36b5e3e45c53fdf90587f3afeb9e3a62e74a999f1628f55c8980268ab73e66f5403873d0fe421da4eb22dd9afdfea0e1e960f9dcd6383e262151cfd63587d15009a930a44e63b559f063f9cfa75661a7866faedc287c534beb7b9113a01c0ece0e4f18cddbe482b7f4810683a3fdf61ea161c8f24a099310ce3e2e822ae0b659e6bfa78289bef995e2f45805c2881eec6453c5f07067d760c8774495a0c184eb6db75f17a7033ea4b652abbd1e806f668e84f7b8ab761ea4502e78294eeecef8b22760c4936901943b2387682c08459b2ec5a02ce17df9d0327e516aa2284b438acfb5f7e0ab4999114d1e039492a2034dbab39c8f1ca39de84f9fb4bf2ebe267c4510b0b196317e0ea392cfbc216bc51d82671ba50be6bb66a32ab9e5df046be877180e9ec84cd35296881af635f0a3ff4b9f675068e31579be666c0b1989af184aac44101383ca5a6b25c6554cd716c76631bda53456a35466256f02a9aa4587b918e2fad906b8464197b8989f6600a71d77bb51424e5589bfeb3d03e78820e627ace0ef66b74cdb15de646d2c42dfd36a45c751f92ec0ca4735e928f1a83ca8a489cd45f61bab6da8f5fcdafc174d55ee1d1a3c82ddfbe7063162f95545dab3dc82deb11f1819e679707cb8c44c268234057d1cdd8048169355d57c1f524e7e997b085d99655831f72df213772eaf96b71a86719b14fd334bab58b80feba7b9ec5173621367d1937407d7710489d66b84da940b8139aabd13eb484320eea59ada26b5267e3f10d0bbe24af0d99c7527dff570287d1c77e8272ef5aef7745e483acb5854c7f650f229af8e653ad245f3fc30b5401fb2f9da69451b4e6e470dccbb4a8e01a32d5c2b481610fd3d0c918021582f1be03590387cdc4ee70f94a6492afe660d7ee72978574ad92ba4c97181dff483291d8cd89eaaec13ec3e7c4c89040e843b17531f24b406dd3f8aa93e9c5770b2499941f7270ebca618e9ca258c7ebbf90ecf4ad27cfd89e560ef73f74c8cdedce8542fe658050bab5d7f2e32e639c69f2c1663634c6ea9186d9afbb6924489fb60250a2dcf769ccec3a8528c66f5dec199b04fdb4fdef8b9d917667a3ca1950cf970b7b8000bad56b6300d4c0dcc497e0d0d1574ce447c075098cc1d7b4b070833105e718f322694634c2d2734ddd7e61b62163db4f63ab39840fab2090bd75a750855ee9091ee5ead23614e8b04bcf25b718db19d6d38f14cba33548033d6ef99f86e940f55f1fbe001a8f508a82ff6f758b39826b087c274e7b383f1e8825edef09450d7eec345f2b553e1bc3e2404a6acd7d743b4713150c35543b2bab1b3c881baa7855a230986e9c030e7b54a6b8b50419848beb755458efa6142f43a1d3b4d14c482683a9dcce9105a1ee96dbe339f910afc267968d7a05f019d2bf128884ad73dba7257c21a15d7a45b1c11dfe18bd077c6c57377baeae5b87a74101b4467bc26d18131f21f2ef22a46cf80461c118aae318078561af2668f700339665b8d552c182419f816a2d73ab6e64354a198688078ad244a0b91fbc3de5f645971306f4979605ee2c373f8a49e6a8f397ddcd9e952a8695f5326f9ccd365a8b873851c4ad578b57c223b6fde3ea6e8fd5dc9093f5fe190f2d58c76d0d4fe18486403c0abcf55b626c9f935fbcebd30e716d541868a777d3880c4fb47edfcf364246996a24088dfcfafa7c1220efd38c356e5ede5ef9b6b2046937b50523fe4565bb0e08a0514fdae54da25338c316a379c12669d2bdd416632965aa23a137c86cbb0682fa5e84a659753ecd8059bb03c3fdb69fbf1b15f875cb34463fbdbde6b6933730776837b9c5175107227367d1eda9f4a39146b6692e183163ea7159c68aa3bf7d2b33d2bd5d549254cb946a2657cbef0919ab14c87931269698f40d1b389abb63807056bf7e25e1e52b9bd110e09c10baf28722a380a29ee3556236778aa3594d9f4ffff2f9f5072f7891cd3a5c58909ea8f41701604ee58eb1935bf1c0dbc3a98617686043ef2a3abbeacd433ba7a4185a1fa195e77b4ab3f07a617b5ef6cb3d22868c62a5be213765c9aef4ee5a22b241f798a2c89e2fc5155d5ecc2cbb589ed3be1974b21ff8874088236dbaf1f49174a8ce77286086e171c1e80493820734e8bff23341b868816d05e1813239397abe41729ab28eca7af82c75f78bdfa82ef5614cad6612ce43c29364759bbbacbcbb62dd8b11b5be653766143a86bef63dc914f09338bf1dd352804c3cff83b36f4092c960376244ac278aa6f2ab043fcab03e283569d6ac6b485a110c33f6a238cfd7a7d26e2c81698d6c9c86575b5e7ed305a643966fc5424f4d679839a34d3d65a7d561a11f5dfe30ac2732f331aa5120e994996c8ec290fd16c9a50b4763ca33595b081963ab6820b1306556419c3baf600ecdcc27069499986df8592c956168a81b8294155bee6dbf55352d401fcf0acc4f5ac67e9b12af83ec34a8bd4f4d9dedce46cc798c06d7210da9aef6fcb186d00a3a16bbc043cd45d05a72e79b6fdb5f927a3f906ce6603d3c23c7cba45d834c3e6d942ea0ea69ccb9ab65e9be0627ab1351"}) 08:35:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101043, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x4, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = getpgid(0xffffffffffffffff) openat(r0, &(0x7f0000000040)='./file0\x00', 0x109180, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x8000, 0xc163, 0x1, 0x4, 0x9fbb, r2}) 08:35:49 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000540)=""/105, 0x69}, {&(0x7f0000000240)=""/46, 0x2e}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x4, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:35:49 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:35:50 executing program 4: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x15b}, @l2cap_cid_signaling={{0x157}, [@l2cap_info_rsp={{0xb, 0x8e, 0xec}, {0x1, 0x4, "0281ec728d62df3e541976523d089b039d62cb0610af99f069192019b18d6a3f38b7ad8d3923262dbef6f376b0253e4cfaa5897cd937ef6b62098feccc1dadb7a508a2b403c124f9fda780c5bfc4320587537684c343f06a5d718493d1f1f1b7f657e81ae797bf860194373cbcd91f0323a2e8f53777077ea51255c801af2cb930a351bc77810822f2c3b9ca7ce533a3ab8d554898b997f863a7ecf177377a1777bc8e9d3cfe62e8aa09283111153399e4c4457d742ccbafa46befa0e7fbc8006b13d1cef822d594062ba9c534ed5237bc5ec26dca01fac748e4d835a1b6b34dfcffbe934835c50d"}}, @l2cap_conf_req={{0x4, 0x5e, 0x48}, {0x9, 0x4, [@l2cap_conf_mtu={0x1, 0x2, 0x5}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x9}, @l2cap_conf_efs={0x6, 0x10, {0xd9, 0x0, 0x1, 0x9, 0x9, 0x200}}, @l2cap_conf_flushto={0x2, 0x2, 0xfff}, @l2cap_conf_efs={0x6, 0x10, {0x1, 0x0, 0x4, 0x58670, 0x1, 0x10000}}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x1, 0x4, 0x2, 0x9}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_move_chan_req={{0xe, 0x51, 0x3}, {0xdece, 0x1f}}, @l2cap_move_chan_cfm={{0x10, 0x7, 0x4}, {0x1, 0x9}}, @l2cap_conn_rsp={{0x3, 0x1, 0x8}, {0x3ff, 0x7, 0x9, 0xfad}}]}}, 0x160) 08:36:11 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:36:11 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000540)=""/105, 0x69}, {&(0x7f0000000240)=""/46, 0x2e}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x4, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:36:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fchown(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000180)}, 0x8000, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x4004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 08:36:11 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}, {{&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000040)="fbe69b45c8b95b48df15d5c31cf6e2c22fc4d039a86b5c7d3f10c04abe5c21272c0572f02549ea277d5e66f9cf0e9a2f8d1241a7a0833229bf741e32dcdc1e562fd14cf9486dfa028a54ba651b3be59a36791b756e1543ba57ffb31978e0b34b039d7c315ada37a9d6a1f27df6d31d4fab8d33863e8a4f10ec16842d84ad1198e552c7ed41279694586fdde7", 0x8c}, {&(0x7f0000000100)="4cc54f07f91fc2ddd444b21076e9a9c5a4018c190903d0de0ae89a6c56185f1eb0ec442cf56a32323692410f1f82e358a8", 0x31}, {&(0x7f0000000140)="27028b568dc6293ec72d0e8a9e7ddd90fa7ef8ae48f6ffa07c", 0x19}, {&(0x7f0000000180)="99693534df39a7c4ae8a70db498a290df08202bf70c6d8cbf3cea2c52cc015c3315d65df6b851f6d2c5a99ec16c81567f4bda4", 0x33}, {&(0x7f0000000240)="bf7c47155961589d39fb6ccedfa03a8ab712f62c03d427571b9c4f8f5e606c854fde013f2d7da9c09c528eff4e9b1ab74a2133a9cd9371ac04b9d16caedacb158efd886edf320ee7b5adf4c24b7d0ff0ad5032285aa49d7196292f7174da5ee2bf9edccd375fb48d007b99c7e5197deb80e55466dd532160c0b3c7dc009e32256446b5ad51f5e34d2626db132ea41ad9be5de765349aa3f0260cb5fdc91c8e15b261202d40c079a95850eb94b4b767b4444aea2ccd0ca1be1737c2d2fd779ddcea5b85214a1aff328a12bf66de4e324cc59a92510e41b06952dd61819307e69335c59ee38dae2bd57ef0f32e14fcebb3ef2799cf335545e8", 0xf8}, {&(0x7f0000000340)="2a245598b9777aef07fc19680eb9c1bd9d1bcaaf6c869a3b1ba42cec587a8fd4745d5f34921efc79633c3913d97187db4ce7e80546b0d77b44403afbd3827f10d01e1e9c178764d4bb4a5244e37990b5b808f3a28470d7dd9e43a24f05ca", 0x5e}, {&(0x7f00000003c0)="9384257b4d2b9042e8a562f993bd5634e36500a7cce71b3a34302fc2272f08ac088cb9011eaaa5c8840f30fd7e17e29929f9e79f2067d10968b6101f33c05c552fa4122f1d79b5e7194e1384a47210537afa77694d5b37c120beb74cc6a7fb79c73bf5f204553600b1fb904ed0af1d1599ebb8c4727fb4f4ff315efb63d7d70f6ed86ef5299adf4561842b5a2ef7deed9a9c0bb67140ad394fe4c68bf42edd385b0a671de526b9dbdf53d72940d3100d434b57230f04411946", 0xb9}], 0x7, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x100}}], 0x2, 0x4) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000680), 0x480001, 0x0) recvmmsg(r1, &(0x7f00000066c0)=[{{&(0x7f00000006c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000740)=""/227, 0xe3}, {&(0x7f0000000840)=""/152, 0x98}, {&(0x7f00000032c0)=""/66, 0x42}], 0x3, &(0x7f0000000900)=""/30, 0x1e}, 0x7}, {{&(0x7f0000000a00)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000a80)=""/136, 0x88}], 0x1, &(0x7f0000000b80)=""/204, 0xcc}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/104, 0x68}, {&(0x7f0000001d00)=""/4083, 0xff3}, {&(0x7f0000002d00)=""/60, 0x3c}], 0x4, &(0x7f0000002d80)=""/236, 0xec}, 0x2cfa}, {{&(0x7f0000002e80)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000003080)=[{&(0x7f0000002f00)=""/233, 0xe9}, {&(0x7f0000003000)=""/113, 0x71}], 0x2, &(0x7f00000030c0)=""/153, 0x99}, 0x101}, {{&(0x7f0000003340)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000065c0)=[{&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/120, 0x78}, {&(0x7f0000004440)=""/4096, 0x1000}, {&(0x7f0000005440)=""/125, 0x7d}, {&(0x7f0000000940)=""/35, 0x23}, {&(0x7f00000054c0)=""/217, 0xd9}, {&(0x7f00000055c0)=""/4096, 0x1000}], 0x7, &(0x7f0000006640)=""/108, 0x6c}, 0x1}], 0x5, 0x1020, &(0x7f0000003280)={0x77359400}) 08:36:11 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:36:11 executing program 6: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:36:11 executing program 7: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:36:11 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') pipe(&(0x7f0000000140)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000100)=r0, 0x1) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='totmaps\x00') syz_io_uring_setup(0xd5c, &(0x7f0000000440)={0x0, 0xcc5c, 0x1, 0x3, 0x360, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000006c0)) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0}) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000001b80)=[{{&(0x7f0000000000)={0x2, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000007c0)) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000009c0)={{r6}, r3, 0xc, @inherit={0x98, &(0x7f00000019c0)=ANY=[@ANYBLOB="00000000000078a0516259eeda7e00000180000000000000fcffffffffffffff0000000000000000010000000000000026070000000000008f0e0000000000000400000000000000d40000000000000008000000000000000008010001f10000ff0000000000000000000000000000000002000000000000040000000004000006000000000000000400000000000000d21800001c1105bc6204300501547b5236b825a1c1a63f3748679cd394b30bb0ba626166f007bc81989c9bb290a33a37d9c33af3089a5725f05b29d8721702126b475238a32c32b1252042341b82617452353cbd03d5307e6840a5584f51bf2acd20cd630000000000"]}, @devid}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0) close(r4) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) 08:36:11 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000540)=""/105, 0x69}, {&(0x7f0000000240)=""/46, 0x2e}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x4, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:36:11 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:36:11 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x1, 0xff, 0x1, 0x40, 0x0, 0x46e, 0x4000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000b40), 0x3}, 0x804, 0xffffffffffffffe1, 0xffffffff, 0x0, 0x9, 0x6, 0x2, 0x0, 0x7, 0x0, 0xefbb}, 0x0, 0xe, r0, 0xa) perf_event_open(&(0x7f0000000a40)={0x4, 0x80, 0x37, 0x0, 0x1, 0x5, 0x0, 0x166b, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd30, 0x1, @perf_bp={&(0x7f0000000a00)}, 0x50400, 0x8, 0x1000, 0x7, 0x3f, 0x5, 0x9, 0x0, 0x2, 0x0, 0x2}, 0x0, 0xc, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = fork() openat$ptp0(0xffffffffffffff9c, &(0x7f0000000b00), 0x342, 0x0) syz_open_procfs(r4, &(0x7f0000000ac0)='net/mcfilter6\x00') openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x40002, 0x180) readv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000000140)=""/163, 0xa3}, {&(0x7f0000000200)=""/73, 0x49}, {&(0x7f0000000300)=""/185, 0xb9}], 0x4) write$binfmt_aout(r3, &(0x7f00000003c0)={{0x107, 0x9, 0x20, 0x51, 0x38e, 0x2, 0x28a, 0x7fff}, "e38dff8cbd030526017e3209d8e46fc4a4bd65ded11755eedf28a3fd631321b30c3c5f010a3c9f5f3f02b8d1225d058086c0957d765c060f3a180c163d221e7dbb7e15912b177196ae71758eb2213680b2ca0a30f07f67842601df346d0bf4f2e5fe12eae41d351713aa85841649ceabdcd2474682430590ef01b01166bc5f37d56fa2094d9053dd3e098ee59b2b0b5f7b405258bca3030c4c52696c0de38d7c2551c1949132f6cf87423df8e01b373f3ec3e1b811bc97336073a4fa3efe1915a89ea3f6662228a6b86431c5fa9c7be5bdf67406eda1a4a876feb21199830f467dfd", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x602) write(r2, &(0x7f0000000080)="01", 0x41030) 08:36:11 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:36:11 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) [ 708.850912] audit: type=1400 audit(1662453371.818:14): avc: denied { read } for pid=5774 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 08:36:11 executing program 6: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:36:12 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r0, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) 08:36:12 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x9, &(0x7f0000000140)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000580)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) dup2(r3, r2) io_submit(r0, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000001c0)=')', 0x1}]) syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f0000000180)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000480)='./file1\x00', 0x5, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000600)="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", 0x1000}], 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d650377696e6e742c757466383d312c756e695f786c6174653d302c757466383d302c7063723d3030303030303030303e7929abf810f765923f32fdc9"]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0) sendmsg$AUDIT_USER(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="90000000ed0304002bc57000fbdbdf25210ed68950a8be4eff0fbc56e36b17d91678770953a3365b6b62a58d9963624e12264636d68c33e188eb7dd372fdd5a066b0e9c86647997004d87d68105beb86b08bf1a783d7e54fa5ca914ec93f56e313beaa7b67a3d4c55ad96a45df17ebf9258db16e2d7016b290d5eb68e5f9891e5563c1f160a68771e7db000000"], 0x90}, 0x1, 0x0, 0x0, 0x10000004}, 0x240480c5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000001600)={@loopback, @multicast2, 0x0}, &(0x7f0000001640)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001700)={'sit0\x00', &(0x7f0000001680)={'syztnl1\x00', r6, 0x29, 0x8, 0x7, 0x5, 0x46, @empty, @remote, 0x8, 0x1, 0x4, 0xff}}) write$cgroup_subtree(r5, &(0x7f0000000200)={[{0x2b, 'freezer'}, {0x2b, 'cpuacct'}, {0x77, 'cpuacct'}, {0x2b, 'memory'}, {0x0, 'freezer'}, {0x2d, 'rdma'}, {0x2d, 'hugetlb'}, {0x2d, 'net'}, {0x2b, 'pids'}, {0x2b, 'perf_event'}]}, 0x52) 08:36:12 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:36:12 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:36:12 executing program 3: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:36:12 executing program 7: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:36:12 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) [ 710.224813] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 710.226423] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 710.227405] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 710.228304] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 710.229313] blk_print_req_error: 1002 callbacks suppressed [ 710.229327] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 29 prio class 2 08:36:29 executing program 6: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:36:29 executing program 1: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) rename(0x0, &(0x7f0000000040)='./file1\x00') bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x6}, 0x6e) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffffff, 0x0, 0x40, 0x1) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) 08:36:29 executing program 7: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001840)={0x0, 0x0, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:36:29 executing program 3: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:36:29 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:36:29 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:36:29 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r0, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) 08:36:29 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:36:29 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = io_uring_setup(0x594f, &(0x7f0000000000)={0x0, 0x2a6, 0x1, 0x3, 0x2a4, 0x0, r0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range(r1, r2, 0x2) fcntl$setstatus(r0, 0x4, 0xc00) write$P9_RMKDIR(r0, 0x0, 0x0) 08:36:29 executing program 2: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:36:44 executing program 4: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x5}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x20, 0x5, 0xdd, 0xda, 0x0, 0x1, 0x24, 0x9, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000180), 0x1}, 0x40, 0x6, 0x0, 0x4, 0x8, 0x2, 0x120, 0x0, 0x401, 0x0, 0x7eb7c92c}, 0x0, 0xe, r1, 0x8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000b, 0x4010, 0xffffffffffffffff, 0xf871a000) r4 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x9, 0x0, 0x7, 0x11, 0x0, 0x7fff, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x6, 0xfff}, 0x40, 0x10001, 0x20, 0x8, 0x73e, 0xffffffff, 0x9, 0x0, 0x9, 0x0, 0x3}, 0x0, 0x9, r0, 0x1) sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1b00"/12], 0x1c}], 0x1}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000000)=0x501) mremap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f0000ff7000/0x4000)=nil) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) 08:36:44 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1999) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000040)={0x66a7, {0x26, 0x9, 0x800000000000, 0x10000, 0x9}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) openat(r2, &(0x7f0000000180)='./file1/file0\x00', 0x448006, 0x185) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x100000) 08:36:44 executing program 7: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:36:44 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r0, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) 08:36:44 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:36:44 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000004c0)) 08:36:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000001040102000000000000000000000400080003400001000008000440000000000500010001"], 0x34}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x15, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x484}, 0x8000) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) 08:36:44 executing program 6: r0 = open$dir(&(0x7f0000000000)='./file1\x00', 0x20842, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x40000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x0) fcntl$setflags(r1, 0x2, 0x1) [ 741.576261] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 08:36:44 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8f, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x44051) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000440)) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 08:36:44 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) [ 741.723497] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 741.761177] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5885 comm=syz-executor.4 08:36:44 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x5320, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x3, 0x8, 0xd5, 0x7fffffff, 0x2, 0x3e, 0x5, 0x2e8, 0x40, 0x2d9, 0x0, 0x4a9b, 0x38, 0x1, 0x7, 0x4, 0x4c78}, [{0x474e552, 0x0, 0x1ff, 0x4, 0x2000000000, 0x0, 0x61, 0x1d}], "2839b767f2278a471916d25539dd0a5cbfd174bb0cd983e5a6b210259863f966a73ee4ed2f89c5bb76f8309494a844dabf3b9cca5cb3c0038be8b163d0514a4e734e38756caf68f60ce05899dddb14d1d9f2137c7d4f2dfe36", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8d1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x12}}, 0x0) poll(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) close_range(r2, r2, 0x0) 08:36:44 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000004c0)) 08:36:44 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) [ 742.112814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5902 comm=syz-executor.4 08:36:45 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:36:45 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8f, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x44051) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a252000ff085e762ac65f7d91053f295d4ffc20d75892ef07d227fdbe18dbfb1af3e0dd6a380e71c4fcaceb3843a0a27d26a418e26c51db155af69e0000000000000000000000000000df63a36fd407eb99643bb3409a86448396cd1499fc9043822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee1bcbc694d91f9967d149f4886d35a626a8dbf6b35022ae0469c89edd059d3b71950ce873078f7854516df53f35200ea7d65b2569bab6721d1f31e789b535d1917a35d28628a5faba1bb56e48d042cb3fe8afb8243841665a22b72a48d45814d483cf996f709de3f"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000440)) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 08:36:45 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:36:45 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000004c0)) 08:36:45 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:36:45 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:36:45 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(r4, &(0x7f00000012c0)=ANY=[@ANYRES32=r0], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000011c0)={"907ca745bb0df34810f6853f3f8f02fa", 0x0, 0x0, {0x800, 0x3f}, {0x1ff, 0xfffffeef}, 0x10001, [0x8, 0x2, 0x3, 0x7ff, 0x0, 0x3, 0x9, 0x20, 0x0, 0xffffffffffffff80, 0x5, 0x6, 0x13, 0x3, 0x2, 0x60dc7689]}) preadv(r1, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 08:36:45 executing program 7: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001840)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:36:45 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001840)={0x0, 0xffffffffffffffff, 0xaba, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:36:45 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x5320, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x3, 0x8, 0xd5, 0x7fffffff, 0x2, 0x3e, 0x5, 0x2e8, 0x40, 0x2d9, 0x0, 0x4a9b, 0x38, 0x1, 0x7, 0x4, 0x4c78}, [{0x474e552, 0x0, 0x1ff, 0x4, 0x2000000000, 0x0, 0x61, 0x1d}], "2839b767f2278a471916d25539dd0a5cbfd174bb0cd983e5a6b210259863f966a73ee4ed2f89c5bb76f8309494a844dabf3b9cca5cb3c0038be8b163d0514a4e734e38756caf68f60ce05899dddb14d1d9f2137c7d4f2dfe36", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8d1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x12}}, 0x0) poll(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) close_range(r2, r2, 0x0) 08:36:45 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:36:45 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:36:45 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:36:45 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f00000012c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:37:00 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000c80)=ANY=[@ANYBLOB="010000000e00000018000000", @ANYRES32=r0, @ANYBLOB="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"]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r2, r2, 0x0, 0x100000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) readv(r1, &(0x7f0000000ac0)=[{&(0x7f0000000340)=""/3, 0x3}, {&(0x7f0000000380)=""/75, 0x4b}, {&(0x7f00000007c0)=""/253, 0xfd}, {&(0x7f00000006c0)=""/84, 0x54}, {&(0x7f00000008c0)=""/126, 0x7e}, {&(0x7f0000000940)=""/113, 0x71}, {&(0x7f0000000b80)=""/20, 0x14}, {&(0x7f0000000bc0)=""/171, 0xab}, {&(0x7f0000000740)=""/26, 0x1a}, {&(0x7f0000000a80)=""/60, 0x3c}], 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x1, 0x1, 0x0, 'queue1\x00', 0x1000}) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000240)=0x1) r3 = epoll_create(0x1) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) io_setup(0xd29, &(0x7f0000000780)=0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x109042, 0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r6, &(0x7f0000000000)="1c", 0xf}]) sendfile(r4, r0, &(0x7f0000000300)=0x8c9e, 0x10001) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x7f) 08:37:00 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:37:00 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:37:00 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:37:00 executing program 2: r0 = syz_io_uring_setup(0x7969, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:37:00 executing program 7: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001840)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:37:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x2, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='devpts\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x40000120) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='./file0\x00') syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000680)={[{}]}) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind(r2, &(0x7f0000000280)=@caif=@dbg={0x25, 0x0, 0x7}, 0x80) r3 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) 08:37:00 executing program 4: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x2c0, 0x8) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080)) syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x99, 0x5f, 0xc, 0x0, 0x10b8, 0x2383, 0x768d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0xff, 0x0, 0x40}}]}}, 0x0) [ 758.011327] [ 758.011546] ====================================================== [ 758.012215] WARNING: possible circular locking dependency detected [ 758.012862] 6.0.0-rc3-next-20220829 #1 Not tainted [ 758.013392] ------------------------------------------------------ [ 758.014055] syz-executor.6/5949 is trying to acquire lock: [ 758.014643] ffff88800bd10400 (&sb->s_type->i_mutex_key#6){++++}-{3:3}, at: ext4_bmap+0x4e/0x470 [ 758.015899] [ 758.015899] but task is already holding lock: [ 758.016532] ffff88800ff543f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x48b/0xc00 [ 758.017598] [ 758.017598] which lock already depends on the new lock. [ 758.017598] [ 758.018453] [ 758.018453] the existing dependency chain (in reverse order) is: [ 758.019260] [ 758.019260] -> #3 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 758.020080] mutex_lock_io_nested+0x148/0x1310 [ 758.020651] jbd2_journal_flush+0x19a/0xc00 [ 758.021193] __ext4_ioctl+0x9e9/0x4090 [ 758.021693] __x64_sys_ioctl+0x19a/0x210 [ 758.022211] do_syscall_64+0x3b/0x90 [ 758.022687] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 758.023322] [ 758.023322] -> #2 (&journal->j_barrier){+.+.}-{3:3}: [ 758.024062] __mutex_lock+0x136/0x14d0 [ 758.024712] jbd2_journal_lock_updates+0x15e/0x310 [ 758.025783] ext4_change_inode_journal_flag+0x17f/0x530 [ 758.026813] ext4_fileattr_set+0x140d/0x18a0 [ 758.027351] vfs_fileattr_set+0x77c/0xb80 [ 758.027866] do_vfs_ioctl+0xfc2/0x1610 [ 758.028348] __x64_sys_ioctl+0x10c/0x210 [ 758.028842] do_syscall_64+0x3b/0x90 [ 758.029300] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 758.029910] [ 758.029910] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 758.030664] percpu_down_write+0x4d/0x3d0 [ 758.031169] ext4_ind_migrate+0x237/0x830 [ 758.031692] ext4_fileattr_set+0x1434/0x18a0 [ 758.032228] vfs_fileattr_set+0x77c/0xb80 [ 758.032740] do_vfs_ioctl+0xfc2/0x1610 [ 758.033226] __x64_sys_ioctl+0x10c/0x210 [ 758.033722] do_syscall_64+0x3b/0x90 [ 758.034175] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 758.034788] [ 758.034788] -> #0 (&sb->s_type->i_mutex_key#6){++++}-{3:3}: [ 758.035560] __lock_acquire+0x2a02/0x5e70 [ 758.036082] lock_acquire+0x1a2/0x530 [ 758.036552] down_read+0x98/0x450 [ 758.036984] ext4_bmap+0x4e/0x470 [ 758.037421] bmap+0xac/0x120 [ 758.037822] jbd2_journal_bmap+0xa8/0x180 [ 758.038337] jbd2_journal_flush+0x853/0xc00 [ 758.038867] __ext4_ioctl+0x9e9/0x4090 [ 758.039352] __x64_sys_ioctl+0x19a/0x210 [ 758.039858] do_syscall_64+0x3b/0x90 [ 758.040319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 758.040931] [ 758.040931] other info that might help us debug this: [ 758.040931] [ 758.041781] Chain exists of: [ 758.041781] &sb->s_type->i_mutex_key#6 --> &journal->j_barrier --> &journal->j_checkpoint_mutex [ 758.041781] [ 758.043193] Possible unsafe locking scenario: [ 758.043193] [ 758.043994] CPU0 CPU1 [ 758.044713] ---- ---- [ 758.045422] lock(&journal->j_checkpoint_mutex); [ 758.046185] lock(&journal->j_barrier); [ 758.047192] lock(&journal->j_checkpoint_mutex); [ 758.048325] lock(&sb->s_type->i_mutex_key#6); [ 758.049066] [ 758.049066] *** DEADLOCK *** [ 758.049066] [ 758.050041] 2 locks held by syz-executor.6/5949: [ 758.050834] #0: ffff88800ff54170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x15e/0x310 [ 758.052399] #1: ffff88800ff543f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x48b/0xc00 [ 758.053517] [ 758.053517] stack backtrace: [ 758.054000] CPU: 1 PID: 5949 Comm: syz-executor.6 Not tainted 6.0.0-rc3-next-20220829 #1 [ 758.054863] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 758.056074] Call Trace: [ 758.056358] [ 758.056608] dump_stack_lvl+0x8b/0xb3 [ 758.057027] check_noncircular+0x263/0x2e0 [ 758.057502] ? print_circular_bug+0x450/0x450 [ 758.057999] ? perf_tp_event+0x758/0xbd0 [ 758.058464] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 758.058965] __lock_acquire+0x2a02/0x5e70 [ 758.059430] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 758.060026] lock_acquire+0x1a2/0x530 [ 758.060462] ? ext4_bmap+0x4e/0x470 [ 758.060877] ? lock_release+0x750/0x750 [ 758.061329] ? lock_is_held_type+0xd7/0x130 [ 758.061813] down_read+0x98/0x450 [ 758.062202] ? ext4_bmap+0x4e/0x470 [ 758.062610] ? rwsem_down_read_slowpath+0xad0/0xad0 [ 758.063165] ext4_bmap+0x4e/0x470 [ 758.063556] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 758.064171] ? ext4_readahead+0x140/0x140 [ 758.064631] bmap+0xac/0x120 [ 758.064987] jbd2_journal_bmap+0xa8/0x180 [ 758.065449] ? jbd2_log_start_commit+0x50/0x50 [ 758.065965] ? jbd2_journal_flush+0x606/0xc00 [ 758.066471] jbd2_journal_flush+0x853/0xc00 [ 758.066952] ? cap_capable+0x1eb/0x250 [ 758.067395] ? jbd2_fc_get_buf+0x310/0x310 [ 758.067872] ? security_capable+0x95/0xc0 [ 758.068328] __ext4_ioctl+0x9e9/0x4090 [ 758.068769] ? ext4_reset_inode_seed+0x450/0x450 [ 758.069349] ? __sanitizer_cov_trace_switch+0x50/0x90 [ 758.069946] ? do_vfs_ioctl+0x132/0x1610 [ 758.070404] ? vfs_fileattr_set+0xb80/0xb80 [ 758.070879] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 758.071521] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x410 [ 758.072172] ? selinux_inode_getsecctx+0xa0/0xa0 [ 758.072697] ? lock_downgrade+0x6d0/0x6d0 [ 758.073160] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 758.073762] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 758.074364] ? lockdep_hardirqs_on+0x79/0x100 [ 758.074879] ? selinux_file_ioctl+0xb1/0x260 [ 758.075378] ? ext4_fileattr_set+0x18a0/0x18a0 [ 758.075899] __x64_sys_ioctl+0x19a/0x210 [ 758.076357] do_syscall_64+0x3b/0x90 [ 758.076772] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 758.077348] RIP: 0033:0x7f55837ddb19 [ 758.077757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 758.079706] RSP: 002b:00007f5580d53188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 758.080530] RAX: ffffffffffffffda RBX: 00007f55838f0f60 RCX: 00007f55837ddb19 [ 758.081304] RDX: 0000000020000240 RSI: 000000004004662b RDI: 0000000000000006 [ 758.082081] RBP: 00007f5583837f6d R08: 0000000000000000 R09: 0000000000000000 [ 758.082855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 758.083630] R13: 00007fffa68761af R14: 00007f5580d53300 R15: 0000000000022000 [ 758.084412] [ 759.745594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.749357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 08:37:02 executing program 7: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001840)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:37:02 executing program 2: r0 = syz_io_uring_setup(0x7969, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 08:37:02 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(r0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) 08:37:02 executing program 7: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001840)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 08:37:02 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7ff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x4) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x90, 0x6, 0x0, 0x0, 0x5, 0xc8e0f1e246faa622, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x539, 0x2, @perf_bp={0x0, 0x1}, 0x8, 0x2, 0x829c, 0x2, 0xcf4b, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x28e5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 08:37:02 executing program 2: r0 = syz_io_uring_setup(0x7969, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xc0}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0x10002) syz_io_uring_setup(0x190c, &(0x7f0000001200)={0x0, 0x748f, 0x8, 0x0, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000001280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/162, 0xa2}], 0x6, 0x7, 0x8001) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x1a100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) [ 760.262377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.263534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 VM DIAGNOSIS: 08:37:01 Registers: info registers vcpu 0 RAX=ffffffff8424b850 RBX=ffffffff85232980 RCX=ffffffff8422d6b2 RDX=ffffed100d9c676b RSI=0000000000000001 RDI=ffffffff8424bd03 RBP=0000000000000000 RSP=ffffffff85207e18 R8 =0000000000000000 R9 =ffff88806ce33b53 R10=ffffed100d9c676a R11=0000000000000001 R12=fffffbfff0a46530 R13=ffffffff85af5510 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff8424b85b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2e125000 CR3=0000000044ac8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000000005f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff824487a1 RDI=ffffffff8763bc20 RBP=ffffffff8763bbe0 RSP=ffff8880474ff148 R8 =0000000000000001 R9 =000000000000000a R10=000000000000005f R11=0000000000000001 R12=000000000000005f R13=ffffffff8763bbe0 R14=0000000000000010 R15=ffffffff82448790 RIP=ffffffff824487f9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f5580d53700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdba346e543 CR3=000000000f1a2000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000